Skip to content
OpenAdvisories

Package · Go

github.com/nuclio/nuclio

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2026-52832 Public exploit

    Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container

    Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default (NOP auth mode). The spec.handler field (e.g., mymodule:myfunction) is parsed …

    nuclio nuclio github.com/nuclio/nuclio Go