Skip to content
OpenAdvisories

Package · Alpine

beszel

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID

    Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The …