Repository navigation
Security: getwud/wud
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Read-only users can read registry and trigger proxy passwords because config masking skips maskProxyGHSA-j72x-w22v-5h72 published
Nov 8, 2026 by fmartinouModerate -
A read-scoped API token can create admin users and mint write-scoped tokens because the users and profile routers ignore token scopesGHSA-xv5r-jpc4-8j2j published
Nov 1, 2026 by fmartinouHigh -
Arbitrary code execution in WUD via Kubernetes/Nomad workload link templates (eval injection)GHSA-rrhg-3h69-4fvf published
Nov 1, 2026 by fmartinouHigh -
Deleted users retain access (including admin role) through existing sessionsGHSA-gwmj-qqhx-pr5c published
Oct 21, 2026 by fmartinouHigh -
Unauthenticated /api/events SSE endpoint leaks container inventory incl. all Docker labels (bypasses mandatory auth)GHSA-hgmw-ffwv-wvm2 published
Nov 1, 2026 by fmartinouModerate
Learn more about advisories related to getwud/wud in the GitHub Advisory Database