Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/juju/juju

go

Package juju is devops distilled.

View on github.com · View on proxy.golang.org

Security Advisories for github.com/juju/juju in go

Moderate
about 2 months ago

Juju: In-Memory Token Store for Discharge Tokens Lacks Concurrency Safety and Persistence GSA_kwCzR0hTQS03bTU1LTJocjQtcHc3OM4ABVGb

go github.com/juju/juju
Critical
about 2 months ago

Juju: CloudSpec method leaking cloud credentials GSA_kwCzR0hTQS13NWZxLTg5NjUtYzk2Oc4ABVGa

go github.com/juju/juju
High
about 2 months ago

Juju has a resource poisoning vulnerability GSA_kwCzR0hTQS0yNDV2LXA4ZmotdndtMs4ABUr9

go github.com/juju/juju
Moderate
about 2 months ago

Juju: Read All Controller Logs From Compromised Workload GSA_kwCzR0hTQS1qNmY2LWpwM3AtNTNtd84ABUr8

go github.com/juju/juju
Critical
2 months ago

Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster GSA_kwCzR0hTQS1ndnJqLWNqY2gtNzI4cM4ABUmZ

go github.com/juju/juju
Moderate
2 months ago

Juju affected by Confused Deputy IDOR attack via Predictable user specified ID in Juju Secrets GSA_kwCzR0hTQS01Y2oyLXJxcWYtaHg5cM4ABT3X

go github.com/juju/juju
High
2 months ago

Juju has unauthorized access to out-of-scope Kubernetes secrets GSA_kwCzR0hTQS00Mzl3LXYycDctcGdnY84ABT3W

go github.com/juju/juju
High
2 months ago

Juju has unauthorized update of out-of-scope Vault secrets GSA_kwCzR0hTQS04OXg3LTVtNW0tbWNtbc4ABT3V

go github.com/juju/juju
Moderate
2 months ago

Juju affected by timing ownership claim attack on new external back-end secrets GSA_kwCzR0hTQS1nZmdyLTZocmotODV3d84ABT2n

go github.com/juju/juju
Low
4 months ago

Juju has broken CMR authorization GSA_kwCzR0hTQS1qNDc3LTZ2cGctNmM4eM4ABRtR

go github.com/juju/juju
High
11 months ago

Juju allows arbitrary executable uploads via authenticated endpoint without authorization GSA_kwCzR0hTQS00dmM4LXd2aHctbTVnds4ABJ9u

go github.com/juju/juju
Moderate
11 months ago

Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorization GSA_kwCzR0hTQS1yNjR2LTgyZmgteGM2M84ABJ9t

go github.com/juju/juju
High
11 months ago

Juju zip slip vulnerability via authenticated endpoint GSA_kwCzR0hTQS0yNGNoLXczOHYteG1oOM4ABJ9n

go github.com/juju/juju
Moderate
over 1 year ago

Vulnerable juju introspection abstract UNIX domain socket GSA_kwCzR0hTQS14d2dqLXZwbTktcTJycc4AA_71

go github.com/juju/juju
Moderate
over 1 year ago

Vulnerable juju hook tool abstract UNIX domain socket GSA_kwCzR0hTQS04djR3LWY0cjktN2g2eM4AA_70

go github.com/juju/juju
Moderate
over 1 year ago

JUJU_CONTEXT_ID is a predictable authentication secret GSA_kwCzR0hTQS1taDk4LTc2M2gtbTl2NM4AA_7w

go github.com/juju/juju
High
almost 2 years ago

Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm GSA_kwCzR0hTQS02dmptLTU0dnAtbXhoeM4AA-YR

go github.com/juju/juju
Moderate
over 3 years ago

Juju controller - Arbitrary file reading vulnerability GSA_kwCzR0hTQS14NXJ2LXc5cG0tOHFwOM4AAx5R

go github.com/juju/juju
Critical
about 4 years ago

Juju uses a UNIX domain socket without setting appropriate permissions GSA_kwCzR0hTQS1qM2hwLXB2NnYtcmdyeM4AASgQ

go github.com/juju/juju

Filter by Severity

Moderate 9 High 6 Critical 3 Low 1