Skip to content
OpenAdvisories

Package · Go

github.com/henrygd/beszel

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID

    Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The …