Skip to content
OpenAdvisories

Package · Go

github.com/juju/juju

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2026-1237

    Juju has broken CMR authorization

    Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to update database records can mint an invalid macaroon that is incorrectly validated by the juju controller, enabling a cha…

    Canonical Juju github.com/juju/juju Go