|Link||package | bugs open | bugs closed | Wiki | GitHub | web search|
|Description||A web interface to access GNU Mailman v3 archives|
A security issue has been found in HyperKitty before version 1.3.5. The secret archiver key is passed as a GET query parameter and can therefore be leaked...
|CVE-2021-35057||AVG-2003||Medium||Yes||Private key recovery||
A security issue has been found in HyperKitty before version 1.3.5, where the secret archiver key is vulnerable to timing attacks. This is only exploitable...
An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty before version 1.3.5. When importing a private mailing list's archives,...