Zephyr Project Manager vulnerabilities

5 known vulnerabilities in Zephyr Project Manager from Dylan James. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Zephyr Project Manager: Missing Authorization

  CVE-2025-54714Aug 28, 2025Dylan James

  Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through <= 3.3.201.

• 7.1 High severity

  Zephyr Project Manager: Authorization Bypass Through User-Controlled Key

  CVE-2024-43916Aug 26, 2024Dylan James

  Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.102.

• 9.8 Critical severity

  Zephyr Project Manager: Authorization Bypass Through User-Controlled Key

  CVE-2024-43322Aug 18, 2024Dylan James

  Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.100.

• 7.5 High severity

  Zephyr Project Manager: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-38761Aug 1, 2024Dylan James

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.99.

• 8.8 High severity

  Zephyr Project Manager: Improper Privilege Management

  CVE-2024-37484Jul 9, 2024Dylan James

  Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97.