Skip to content
OpenAdvisories

Package · PyPI

clauster

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-h4g2-xfmw-q2c9

    Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset

    ### Summary A Clauster instance bound to a **non-loopback** address (e.g. `0.0.0.0` or a LAN IP) can serve the entire dashboard and its API **without any authentication** — even when the operator has configured a password — if `auth.enabled` is left at its de…

    clauster PyPI