github.com/fleetdm/fleet
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database | github.com/fleetdm/fleet/v4github.com/fleetdm/fleet | Go | High | Fix reported | |
| Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment | github.com/fleetdm/fleet/v4github.com/fleetdm/fleet | Go | Critical | Fix reported | |
| Fleet has an Access Control vulnerability in debug/pprof endpoints | github.com/fleetdm/fleet/v4github.com/fleetdm/fleet | Go | High | Fix reported | |
| Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability | github.com/fleetdm/fleet/v4github.com/fleetdm/fleet | Go | Medium | Fix reported |