github.com/daytonaio/daytona
Go · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Daytona: Public sandbox previews remain accessible for up to one hour after being made private | github.com/daytonaio/daytona | Go | زیاد | اصلاح گزارش شده | |
| Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles | github.com/daytonaio/daytona | Go | زیاد | اصلاح گزارش شده | |
| Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape | github.com/daytonaio/daytona | Go | متوسط | اصلاح گزارش شده | |
| Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join | github.com/daytonaio/daytona | Go | متوسط | اصلاح گزارش شده |