Vulnerable: version 2.8.2nb4 is affected by 11 known vulnerabilities. See below.
net/icingaweb2 2.8.2nb4 NetBSD
PHP-based Web UI for Icinga
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
b9ae47468e- License
- gnu-gpl-v2
- Categories
- net, sysutils, www
- Package size
- 5128.8 KiB, 26038.0 KiB installed
Description
Icinga Web 2 is a powerful PHP framework for web applications that comes in a clean and reduced design. It's fast, responsive, accessible and easily extensible with modules.
Install
Binary package:
pkgin install icingaweb2
From pkgsrc:
cd /usr/pkgsrc/net/icingaweb2 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 2.8.2nb4 |
| NetBSD 10.1 aarch64 | 2.8.2nb3 |
| SmartOS / illumos x86_64 | 2.8.2nb4 |
| macOS 15 arm64 | - |
Dependencies
Run dependencies 8
No port depends on this one.
Known vulnerabilities 11
- icingaweb2: cross-site-scripting (CVE-2018-18248)
- icingaweb2: arbitrary-file-reading (CVE-2021-32746)
- icingaweb2: sensitive-information-disclosure (CVE-2021-32747)
- icingaweb2: sensitive-information-disclosure (CVE-2022-24714)
- icingaweb2: authentication-bypass (CVE-2022-24715)
- icingaweb2: sensitive-information-disclosure (CVE-2022-24716)
- icingaweb2: cross-site-scripting (CVE-2022-50942)
- icingaweb2: cross-site-scripting (CVE-2025-27404)
- icingaweb2: cross-site-scripting (CVE-2025-27405)
- icingaweb2: cross-site-scripting (CVE-2025-27609)
- icingaweb2: open-redirect (CVE-2025-30164)