Skip to content
OpenAdvisories

Vendor

tilt-dev

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.2

    Tilt: Missing authentication on the network-exposed Tilt HUD server

    Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 through 0.37.3, the Tilt HUD HTTP server registers handlers on a gorilla/mux router with no authenticating middleware. When the HUD is bound to a non-loopback address, an u…