Skip to content
OpenAdvisories

Package · Go

github.com/getarcaneapp/arcane/backend

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-45625

    Arcane: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs

    Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.0, Arcane's huma-based REST API exposes nine endpoints under /api/customize/git-repositories and /api/git-repositories/sync for managing GitOps source reposito…

    getarcaneapp arcane github.com/getarcaneapp/arcane/backend Go
  • Critical 9.1
    CVE-2026-23520 Public exploit

    Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE

    Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-updat…

    getarcaneapp arcane github.com/getarcaneapp/arcane/backend Go