Skip to content
OpenAdvisories

Product · labring

laf

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.9

    Laf env causes sensitive information disclosure

    Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, and in certain scenarios of privatization environment, it may lead to sensitive information leakage in secret and configmap. In ES6 syntax, i…