Dylan James vulnerabilities
We track 6 vulnerabilities in Dylan James products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2025.
Latest Dylan James vulnerabilities
- 7.1 High severity
Zephyr Project Manager: Missing Authorization
Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.201.
- 7.1 High severity
Zephyr Admin Theme: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme zephyr-modern-admin-theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through <= 1.4.1.
- 7.1 High severity
Zephyr Project Manager: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.102.
- 9.8 Critical severity
Zephyr Project Manager: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100.
- 7.5 High severity
Zephyr Project Manager: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.99.
- 8.8 High severity
Zephyr Project Manager: Improper Privilege Management
Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97.