Skip to content
OpenAdvisories

Package · Go

github.com/henrygd/beszel

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.5
    CVE-2026-40077

    Beszel has an IDOR in hub API endpoints that read system ID from URL parameter

    Beszel is a server monitoring platform. Prior to 0.18.7, some API endpoints in the Beszel hub accept a user-supplied system ID and proceed without further checks that the user should have access to that system. As a result, any authenticated user can access t…

    henrygd beszel github.com/henrygd/beszel Go
  • Medium 6.5
    CVE-2026-27734

    Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID

    Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The …

    henrygd beszel github.com/henrygd/beszel beszel Alpine Go