Skip to content
OpenAdvisories

Vendor

lyft

1 known vulnerabilities.

Products

confidant 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2024-45793

    Cross-site Scripting from in Confidant API call

    Confidant is a open source secret management service that provides user-friendly storage and access to secrets. The following endpoints are subject to a cross site scripting vulnerability: GET /v1/credentials, GET /v1/credentials/, GET /v1/archive/credentials…

    lyft confidant confidant PyPI