Skip to content
OpenAdvisories

Vendor

vanus-labs

3 known vulnerabilities.

Products

vanus 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-111999

    Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver

    Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the /namespaces/{n…

    vanus-labs vanus
  • High 7.6
    CVE-2026-112000

    Vanus 0.8.0 through 0.9.0 Missing Authorization in Gateway Streaming RPCs

    Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without permission checks. Attackers can supply another tenant's subscription ID to Sub…

    vanus-labs vanus