All products

github.com/azukaar/cosmos-server

Go · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cosmos-Server has an authentication bypass via forward-auth header smuggling on Constellation tunnelCVE-2026-49446 · GHSA-2RX5-2G7J-2659Version ranges need review. github.com/azukaar/cosmos-server Go Medium Fix reported
Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokensCVE-2026-49447 · GHSA-5FQM-CC34-FCF5Version ranges need review. github.com/azukaar/cosmos-server Go Medium Fix reported