Skip to content
OpenAdvisories

Vendor

julep-ai

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    Julep Insecure Direct Object Reference via GET /executions/{execution_id}

    Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authenticated tenants to read another tenant's execution data. Attackers can supply arbitrary execution_id values to retrieve sensitive executio…