Composer nilsteampassnet/teampass has 42 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2020-12478 | TeamPass files are available without authentication | high | 7.5 | =2.1.27.36 | – |
| CVE-2023-1545 | Teampass SQL Injection vulnerability | high | 7.5 | <3.0.0.22 | 3.0.0.22 |
| CVE-2017-15054 | TeamPass arbitrary file upload vulnerability | high | 7.5 | <2.1.27.9 | 2.1.27.9 |
| CVE-2015-7564 | TeamPass vulnerable to SQL Injection | critical | 9.8 | <2.1.25 | 2.1.25 |
| CVE-2020-12479 | TeamPass PHP arbitrary file include vulnerability | high | 8.8 | <=2.1.27.36 | – |
| CVE-2015-7562 | TeamPass vulnerable to Cross-site Scripting | medium | 6.1 | <2.1.25 | 2.1.25 |
| CVE-2020-12477 | Incorrect Authorization in TeamPass | high | 7.5 | <=2.1.27.36 | – |
| CVE-2019-1000001 | TeamPass Storing Passwords in a Recoverable Format vulnerability | critical | 9.8 | <=2.1.27 | – |
| CVE-2023-2859 | Code injection in nilsteampassnet/teampass | high | 7.1 | <3.0.9 | 3.0.9 |
| CVE-2020-11671 | Missing Authorization in TeamPass | high | 8.1 | <=2.1.27.36 | – |
| CVE-2023-3551 | TeamPass Code Injection vulnerability | critical | 9.1 | <3.0.10 | 3.0.10 |
| CVE-2022-26980 | Cross-site Scripting in teampass | medium | 6.1 | <=2.1.26 | – |
| CVE-2017-15055 | TeamPass Improper Privilege Management | high | 8.1 | <2.1.27.9 | 2.1.27.9 |
| CVE-2017-9436 | TeamPass SQL injection in users.queries.php | critical | 9.8 | <2.1.27.5 | 2.1.27.5 |
| CVE-2019-17205 | TeamPass Stored Cross-site Scripting | medium | 6.1 | <=2.1.27.36 | – |
| CVE-2017-15051 | TeamPass stored cross-site scripting (XSS) vulnerability | medium | 5.4 | <2.1.27.9 | 2.1.27.9 |
| CVE-2017-15278 | TeamPass Cross-Site Scripting (XSS) | medium | 5.4 | <2.1.27.9 | 2.1.27.9 |
| CVE-2017-15052 | TeamPass Improper Privilege Management | medium | 4.9 | <2.1.27.9 | 2.1.27.9 |
| CVE-2017-15053 | TeamPass Improper Privilege Management | medium | 4.9 | <2.1.27.9 | 2.1.27.9 |
| CVE-2023-3086 | TeamPass vulnerable to stored Cross-site Scripting | critical | 9.0 | <3.0.9 | 3.0.9 |
| CVE-2023-3084 | TeamPass vulnerable to stored Cross-site Scripting | high | 8.1 | <3.0.9 | 3.0.9 |
| CVE-2023-3553 | TeamPass information exposure vulnerability | high | 7.5 | <3.0.10 | 3.0.10 |
| CVE-2023-1070 | TeamPass External Control of File Name or Path vulnerability | high | 7.1 | <3.0.0.23 | 3.0.0.23 |
| CVE-2019-12950 | TeamPass Cross-site Scripting (XSS) | medium | 5.4 | <=2.1.27.35 | – |
| CVE-2023-3083 | TeamPass vulnerable to stored Cross-site Scripting | high | 8.7 | <3.0.9 | 3.0.9 |
| CVE-2019-16904 | TeamPass Cross-site Scripting (XSS) vulnerability | medium | 5.4 | <=2.1.27.36 | – |
| CVE-2023-3009 | nilsteampassnet/teampass vulnerable to cross-site scripting | medium | 5.4 | <3.0.9 | 3.0.9 |
| CVE-2019-17203 | TeamPass Stored Cross-site Scripting | medium | 5.4 | <=2.1.27.36 | – |
| CVE-2019-17204 | TeamPass Stored Cross-site Scripting | medium | 5.4 | <=2.1.27.36 | – |
| CVE-2023-3565 | TeamPass Cross-site Scripting vulnerability | medium | 5.4 | <3.0.10 | 3.0.10 |
| CVE-2023-2516 | Cross Site Scripting in nilsteampassnet/teampass | medium | 5.4 | <3.0.7 | 3.0.7 |
| CVE-2023-2591 | teampass vulnerable to code injection | high | 7.1 | <3.0.7 | 3.0.7 |
| CVE-2023-3552 | TeamPass vulnerable to Improper Encoding or Escaping of Output | high | 7.6 | <3.0.10 | 3.0.10 |
| CVE-2023-3531 | TeamPass Cross-site Scripting vulnerability | high | 8.1 | <3.0.10 | 3.0.10 |
| CVE-2023-3191 | Teampass Cross-site Scripting vulnerability | medium | 5.4 | <3.0.9 | 3.0.9 |
| CVE-2023-1463 | Improper Authorization in nilsteampassnet/teampass | medium | 5.4 | <3.0.0.23 | 3.0.0.23 |
| CVE-2023-3190 | Teampass Cross-site Scripting vulnerability | medium | 4.6 | <3.0.9 | 3.0.9 |
| CVE-2024-50703 | TeamPass privileges issue | medium | 5.4 | <3.1.3.1 | 3.1.3.1 |
| CVE-2023-3095 | TeamPass vulnerable to Improper Access Control | medium | 6.5 | <3.0.9 | 3.0.9 |
| CVE-2023-2021 | nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS) | medium | 5.8 | <3.0.3 | 3.0.3 |
| CVE-2024-50701 | TeamPass does not properly check whether a folder is in a user's allowed folders list | medium | 4.3 | <3.1.3.1 | 3.1.3.1 |
| CVE-2024-50702 | TeamPass mail_me operation authorization issue | medium | 5.4 | <3.1.3.1 | 3.1.3.1 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked