GO-2026-4277
NoneCVSS
—
EPSS
—
Published
Jan 12, 2026
CISA due date
—
The record
listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover in github.com/knadh/listmonk
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/knadh/listmonk | 0 | 1.1.1-0.20251231125615-74dc5a01cfbb |
| Go | github.com/knadh/listmonk | 1.1.1 | 6.0.0 |
| go | github.com/knadh/listmonk | 1.1.1 | 6.0.0 |