PkgSeer

Vulnerabilities

Last updated 47 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/openchoreo/openchoreo OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs High Risk 7.4 3 hours ago 3 hours ago
github.com/openchoreo/openchoreo OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs Critical 9.6 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass) Medium Risk 5.3 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation Critical 9.0 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods High Risk 8.8 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints High Risk 8.8 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation in github.com/openchoreo/openchoreo Unknown 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods in github.com/openchoreo/openchoreo Unknown 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass) in github.com/openchoreo/openchoreo Unknown 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints in github.com/openchoreo/openchoreo Unknown 1 month ago 1 month ago
github.com/openchoreo/openchoreo OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs in github.com/openchoreo/openchoreo Unknown 1 month ago 1 month ago
Data courtesy of OSV.dev
Page 1