Security
فارسی
All products

github.com/portainer/portainer

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Portainer CE allows username enumeration through authentication response timingCVE-2024-29296 · GHSA-87X6-8M9V-G8C2Version ranges need review. github.com/portainer/portainer Go Medium Fix reported
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized InstancesCVE-2026-55761 · GHSA-X626-FCWX-F5PCVersion ranges need review. github.com/portainer/portainer Go High Fix reported
Portainer has a path traversal in backup archive extraction that allows arbitrary file writeCVE-2026-44885 · GHSA-M8FG-67J7-CX4VVersion ranges need review. github.com/portainer/portainer Go Medium Fix reported
Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-UpdateCVE-2026-44881 · GHSA-RPGQ-M5FP-32WRVersion ranges need review. github.com/portainer/portainer Go High Fix reported
Portainer: JWT accepted in URL query leaks tokens to logs and referersCVE-2026-44883 · GHSA-JVP4-Q659-95MJVersion ranges need review. github.com/portainer/portainer Go High Fix reported
Portainer missing authorization on Docker plugin endpoints, which allows host RCECVE-2026-44848 · GHSA-RRMM-9V76-H3P4Version ranges need review. github.com/portainer/portainer Go Critical Fix reported
Portainer's Kubernetes middleware continues after token validation failure, bypassing endpoint authorizationCVE-2026-44882 · GHSA-MGQ6-4X29-88R3Version ranges need review. github.com/portainer/portainer Go High Fix reported
Portainer missing authorization on custom template file endpoint, which exposes template contentCVE-2026-44884 · GHSA-CQPQ-2FGR-8MVCVersion ranges need review. github.com/portainer/portainer Go Medium Fix reported
Portainer has a bind-mount restriction bypass via HostConfig.MountsCVE-2026-44850 · GHSA-7FW3-X4R2-G7WCVersion ranges need review. github.com/portainer/portainer Go High Fix reported
Portainer has an endpoint security bypass via Swarm service create/updateCVE-2026-44849 · GHSA-5FXQ-QCF3-244WVersion ranges need review. github.com/portainer/portainer Go Critical Fix reported
Portainer improperly uses an encryption algorithm in the AesEncrypt functionCVE-2024-33662 · GHSA-9MJW-79R6-C9M8Version ranges need review. github.com/portainer/portainer Go High Fix reported