Approved changes feed: RSS · Atom
cpe:2.3:a:serverpod:serverpod:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Serverpod (cf4d3627-c9c2-5cd1-ac6f-53809754442f) |
|---|---|
| Product | Serverpod (47a80ce9-9d71-55b3-9de6-548ec9a138ce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/serverpod/serverpod |
purl2cpe | 2026-06-01 10:16:01.724739 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-29887 |
vulnerable | 2026-06-08 06:33:29.494560 |
Serverpod client accepts any certificate
HIGH (7.4)
Serverpod is an app and web server, built for the Flutter and Dart ecosystem. This bug bypassed the validation of TSL certificates on all none web HTTP clients in the `serverpod_client` package. Making them susceptible to a man in the middle attack against encrypted traffic between the client device and the server. An attacker would need to be able to intercept the traffic and highjack the connection to the server for this vulnerability to be used. Upgrading to version `1.2.6` resolves this issue.
Published: 2024-03-27T18:46:32.750Z
Updated: 2024-08-27T20:30:09.237Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29886 |
vulnerable | 2026-06-08 06:33:29.494137 |
Improved security for stored password hashes
MEDIUM (5.3)
Serverpod is an app and web server, built for the Flutter and Dart ecosystem. An issue was identified with the old password hash algorithm that made it susceptible to rainbow attacks if the database was compromised. This vulnerability is fixed by 1.2.6.
Published: 2024-03-27T18:42:45.113Z
Updated: 2024-08-02T01:17:58.459Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.