Skip to content
OpenAdvisories

Vendor

rowboatlabs

4 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.3

    rowboatlabs rowboat tools_webhook app.py tool_call improper authentication

    A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of the file apps/experimental/tools_webhook/app.py of the component tools_webhook. Such manipulation of the argument X-Tools-JWE leads to impro…

  • High 7.3

    rowboatlabs rowboat Session route.ts PUT missing authentication

    A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/[fileId]/route.ts of the component Session Hand…