api-scanner-docker

API Scanner - Self-Hosted Deployment API Scanner is an automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specifications and WSDL files. Prerequisites Docker Engine 20.10+ Docker Compose v2 Python 3.6+ for setup script 8 GB RAM minimum 16 G...

CVE-2026-56654: Improper Access Control

Privilege Escalation via Access Token Scope Escalation in API...

CVE-2025-64683: Concurrent Execution using Shared Resource with Improper Synchronization

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API...

EUVD-2022-51566

Malicious code in bioql PyPI...

CVE-2025-43782: Authorization Bypass Through User-Controlled Key

Insecure Direct Object Reference IDOR vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote authenticated users to access a workflow definition by name via the API...

CVE-2022-4206

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

CVE-2025-48391: Missing Authentication for Critical Function

In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API...

CVE-2024-48902: Missing Authorization

In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API...

PT-2023-17144 · Gitlab · Gitlab Dast Api Scanner

Name of the Vulnerable Software and Affected Versions: GitLab DAST API scanner versions 1.6.50 through 2.10.x Description: An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence. Recommendations: For versions 1.6.50...

Authorization

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...

CVE-2023-0326

Summary of CVE-2023-0326 (GitLab DAST API Scanner): Affects GitLab DAST API scanner versions 1.6.50 through 2.11.0. The root cause is leakage of Authorization headers in vulnerability report evidence, exposing credentials in reports. Documented impact is access to sensitive authorization data via...

CVE-2023-0326: Undefined Security Weakness

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in vulnerability report evidence...

CVE-2022-4206

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

Authorization

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

CVE-2022-4206

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

CVE-2022-4206

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

CVE-2022-4206

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...

PT-2023-14064 · Unknown · Dast Api Scanner

Name of the Vulnerable Software and Affected Versions: DAST API scanner versions 1.6.50 through 2.0.101 Description: A sensitive information leak issue has been discovered, exposing the Authorization header in the vulnerability report. This issue affects all versions of the DAST API scanner prior...

CVE-2022-4206

The CVE-2022-4206 entry describes a sensitive information leak in the DAST API Scanner: all versions from 1.6.50 through 2.0.101 expose the Authorization header in vulnerability reports. Root cause is an information disclosure within the vulnerability report generation. Impact is confidentiality ...

CVE-2022-4206: Exposure of Sensitive Information to an Unauthorized Actor

A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in the vulnerability report...