Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/daytonaio/daytona

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/daytonaio/daytona in go

Moderate
2 months ago

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape GSA_kwCzR0hTQS1manY4LWo0cDUtY3I5bc4ABZGx

go github.com/daytonaio/daytona
Moderate
2 months ago

Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join GSA_kwCzR0hTQS1xd3hmLTJtN20tMm0zeM4ABY4s

go github.com/daytonaio/daytona
High
2 months ago

Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles GSA_kwCzR0hTQS1xeHZtLXBjZm0tcWMzOc4ABY08

go github.com/daytonaio/daytona
High
2 months ago

Daytona: Public sandbox previews remain accessible for up to one hour after being made private GSA_kwCzR0hTQS13dzYzLXB2NXgtdmZjOM4ABY03

go github.com/daytonaio/daytona

Filter by Severity

Moderate 2 High 2