github.com/nuclio/nuclio
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE | github.com/nuclio/nuclio | Go | Critical | Fix reported | |
| Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE | github.com/nuclio/nuclio | Go | High | Fix reported | |
| Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container | github.com/nuclio/nuclio | Go | Medium | Fix reported | |
| Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project | github.com/nuclio/nuclio | Go | High | Fix reported | |
| Nuclio Shell Runtime Command Injection Leading to Privilege Escalation | github.com/nuclio/nuclio | Go | High | Fix reported |