CVE-2021-3309: Wekan Project Wekan

High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days.

packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,

Affected products

• Wekan Project Wekan: before 4.87 (fixed in 4.87)

Published 2021-01-26. Last modified 2026-06-17.