Skip to content
OpenAdvisories

Vendor

henrygd

3 known vulnerabilities.

Products

beszel 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2026-94382

    Beszel before 0.19.0 Insecure Direct Object Reference via user-alerts

    Beszel before 0.19.0 contains an insecure direct object reference vulnerability in the POST and DELETE /api/beszel/user-alerts handlers that allows any authenticated user to create or delete alerts on systems they cannot access. Attackers can supply arbitrary…

    henrygd beszel
  • Medium 6.5
    CVE-2026-27734

    Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID

    Beszel is a server monitoring platform. Prior to version 0.18.2, the hub's authenticated API endpoints GET /api/beszel/containers/logs and GET /api/beszel/containers/info pass the user-supplied "container" query parameter to the agent without validation. The …

    henrygd beszel github.com/henrygd/beszel beszel Alpine Go