CVE-2025-54635

Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability...

Exposure of debug and metrics endpoints in Pomerium

Impact In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. This can leak potentially sensitive environmental information or lead to limited denial of service conditions. Patches v0.17.1 Workarounds Block access to...

Sentinel has a weak password vulnerability

Sentinel is a highly available traffic protection component for distributed service architectures. Sentinel suffers from a weak password vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...