Skip to content

Known vulnerabilities in Dylan James Zephyr Project Manager

Is your version affected?

CVE Summary Score Published
CVE-2025-54714 Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting… 7.1 High Aug 28, 2025
CVE-2025-32526 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan James Zephyr… 7.1 High Apr 17, 2025
CVE-2025-39552 Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting… 5.4 Medium Apr 16, 2025
CVE-2024-43915 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James… 5.5 Medium Aug 26, 2024
CVE-2024-43916 Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue… 4.3 Medium Aug 26, 2024
CVE-2024-43322 Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue… 5.4 Medium Aug 18, 2024
CVE-2024-38761 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Dylan James Zephyr Project Manager.This… 7.5 High Aug 1, 2024
CVE-2024-37484 Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue… 8.8 High Jul 9, 2024
CVE-2023-31237 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Dylan James Zephyr Project Manager.This issue… 4.7 Medium Dec 29, 2023
CVE-2023-34373 Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Project Manager plugin <= 3.3.93 versions 5.4 Medium Jun 19, 2023

Other Dylan James products