Skip to content
OpenAdvisories

Package · Go

github.com/flyteorg/flyteadmin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2022-39273

    Default OAuth Authorization Server secret in FlyteAdmin

    FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  • Medium 6.5
    CVE-2022-31145

    Insufficient AccessToken Expiration Check in FlyteAdmin

    FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go