Repository navigation
Security: getwud/wud
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
A read-scoped API token can create admin users and mint write-scoped tokens because the users and profile routers ignore token scopesGHSA-xv5r-jpc4-8j2j published
Nov 1, 2026 by fmartinouHigh -
Arbitrary code execution in WUD via Kubernetes/Nomad workload link templates (eval injection)GHSA-rrhg-3h69-4fvf published
Nov 1, 2026 by fmartinouHigh -
Deleted users retain access (including admin role) through existing sessionsGHSA-gwmj-qqhx-pr5c published
Oct 21, 2026 by fmartinouHigh -
Unauthenticated /api/events SSE endpoint leaks container inventory incl. all Docker labels (bypasses mandatory auth)GHSA-hgmw-ffwv-wvm2 published
Nov 1, 2026 by fmartinouModerate
Learn more about advisories related to getwud/wud in the GitHub Advisory Database