Skip to content
OpenAdvisories

Package · Go

github.com/henrygd/beszel

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2026-40077

    Beszel has an IDOR in hub API endpoints that read system ID from URL parameter

    Beszel is a server monitoring platform. Prior to 0.18.7, some API endpoints in the Beszel hub accept a user-supplied system ID and proceed without further checks that the user should have access to that system. As a result, any authenticated user can access t…

    henrygd beszel github.com/henrygd/beszel Go