Security
فارسی
All products

github.com/juju/juju

Go · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Juju has Improper TLS Client/Server authentication and certificate verification on Database ClusterCVE-2026-4370 · GHSA-GVRJ-CJCH-728PVersion ranges need review. github.com/juju/juju Go Critical No fix reported
Juju zip slip vulnerability via authenticated endpointCVE-2025-53513 · GHSA-24CH-W38V-XMH8Version ranges need review. github.com/juju/juju Go High Fix reported
Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charmCVE-2024-6984 · GHSA-6VJM-54VP-MXHXVersion ranges need review. github.com/juju/juju Go High Fix reported
Juju: CloudSpec method leaking cloud credentialsCVE-2026-5412 · GHSA-W5FQ-8965-C969Version ranges need review. github.com/juju/juju Go Critical Fix reported
Juju: Read All Controller Logs From Compromised WorkloadCVE-2025-68152 · GHSA-J6F6-JP3P-53MWVersion ranges need review. github.com/juju/juju Go Medium Fix reported
Juju: In-Memory Token Store for Discharge Tokens Lacks Concurrency Safety and PersistenceCVE-2026-5774 · GHSA-7M55-2HR4-PW78Version ranges need review. github.com/juju/juju Go Medium Fix reported
Juju has a resource poisoning vulnerabilityCVE-2025-68153 · GHSA-245V-P8FJ-VWM2Version ranges need review. github.com/juju/juju Go High Fix reported
Juju affected by Confused Deputy IDOR attack via Predictable user specified ID in Juju SecretsCVE-2026-32694 · GHSA-5CJ2-RQQF-HX9PVersion ranges need review. github.com/juju/juju Go Medium Fix reported
Juju has unauthorized update of out-of-scope Vault secretsCVE-2026-32692 · GHSA-89X7-5M5M-MCMMVersion ranges need review. github.com/juju/juju Go High Fix reported
Juju affected by timing ownership claim attack on new external back-end secretsCVE-2026-32691 · GHSA-GFGR-6HRJ-85WWVersion ranges need review. github.com/juju/juju Go Medium Fix reported
Juju has unauthorized access to out-of-scope Kubernetes secretsCVE-2026-32693 · GHSA-439W-V2P7-PGGCVersion ranges need review. github.com/juju/juju Go High Fix reported
Juju has broken CMR authorizationCVE-2026-1237 · GHSA-J477-6VPG-6C8XVersion ranges need review. github.com/juju/juju Go Low No fix reported
Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorizationCVE-2025-53512 · GHSA-R64V-82FH-XC63Version ranges need review. github.com/juju/juju Go Medium Fix reported
Juju uses a UNIX domain socket without setting appropriate permissionsCVE-2017-9232 · GHSA-J3HP-PV6V-RGRXVersion ranges need review. github.com/juju/juju Go Critical Fix reported
JUJU_CONTEXT_ID is a predictable authentication secretCVE-2024-7558 · GHSA-MH98-763H-M9V4Version ranges need review. github.com/juju/juju Go Medium Fix reported
Vulnerable juju hook tool abstract UNIX domain socketCVE-2024-8037 · GHSA-8V4W-F4R9-7H6XVersion ranges need review. github.com/juju/juju Go Medium Fix reported
Juju allows arbitrary executable uploads via authenticated endpoint without authorizationCVE-2025-0928 · GHSA-4VC8-WVHW-M5GVVersion ranges need review. github.com/juju/juju Go High Fix reported
Juju controller - Arbitrary file reading vulnerabilityCVE-2023-0092 · GHSA-X5RV-W9PM-8QP8 github.com/juju/juju Go Medium Fix reported
Vulnerable juju introspection abstract UNIX domain socketCVE-2024-8038 · GHSA-XWGJ-VPM9-Q2RQVersion ranges need review. github.com/juju/juju Go Medium Fix reported