github.com/shellhub-io/shellhub
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data | github.com/shellhub-io/shellhub | Go | Medium | Fix reported | |
| ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check | github.com/shellhub-io/shellhub | Go | Medium | Fix reported | |
| ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace | github.com/shellhub-io/shellhub | Go | Medium | Fix reported | |
| ShellHub has crash-DoS via field injection in filter and sort-by parameters | github.com/shellhub-io/shellhub | Go | Medium | Fix reported |