Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Arc has unauthenticated application log disclosure via `/api/v1/logs` | Low Risk 3.0 | 19 hours ago | 18 hours ago |
|
|
arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset | Medium Risk 6.0 | 2 months ago | 2 months ago |
|
|
arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset in github.com/basekick-labs/arc | Unknown | 2 months ago | 2 months ago |
|
|
Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS | High Risk 8.0 | 4 months ago | 4 months ago |
|
|
Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks | High Risk 8.0 | 4 months ago | 4 months ago |
|
|
Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks in github.com/basekick-labs/arc | Unknown | 4 months ago | 4 months ago |
|
|
Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS in github.com/basekick-labs/arc | Unknown | 4 months ago | 4 months ago |
Page 1