Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/loft-sh/devspace

2 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 high
Registry
pkg.go.dev

Advisories 2

  • DevSpace UI Server WebSocket CheckOrigin does not validate source

    Affected: from 6.3.20, fixed in 6.3.21; all versions.

  • The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the…

    Affected: fixed in 4.14.0.