HIGHPackagist
GHSA-277f-37gw-9gmq· CVE-2025-44163raspap-webgui has a Directory Traversal vulnerability
Modified: 6/30/2025
package
Packagist/billz/raspap-webgui
pkg:packagist/billz/raspap-webgui
HIGH8.8Packagist
GHSA-4wwf-f7w3-94f5· CVE-2026-24788RaspAP raspap-webgui contains an OS Command Injection vulnerability
Modified: 2/3/2026
HIGH8.8Packagist
GHSA-536p-4pcj-5mr9· CVE-2021-38557raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions.
Modified: 9/10/2026
CRITICAL9.8Packagist
GHSA-7c28-wg7r-pg6f· CVE-2022-39986RaspAP Command Injection vulnerability
Modified: 2/16/2024
HIGH8.8Packagist
GHSA-7r88-wjhj-jr8m· CVE-2022-39987RaspAP Command Injection vulnerability
Modified: 2/16/2024
HIGH8.8Packagist
GHSA-7vph-p634-vrqf· CVE-2021-38556Command Injection in RaspAP 2.6.6
Modified: 9/10/2026
MEDIUM4.7Packagist
GHSA-99wg-vmvq-2cp5· CVE-2024-2497RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
Modified: 4/10/2025
HIGH8.8Packagist
GHSA-hhqm-f4m4-pq39· CVE-2023-30260RaspAP raspap-webgui Command Injection vulnerability
Modified: 2/16/2024
CRITICAL9.9Packagist
GHSA-q623-2j2j-23jj· CVE-2024-41637RaspAP allows an attacker to escalate privileges
Modified: 8/2/2024
HIGH7.5Packagist
GHSA-vc9f-mgxr-h32r· CVE-2024-28754raspap-webgui vulnerable to denial of service
Modified: 12/2/2024