CVE-2024-49587

Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed...

CVE-2023-30971

Gotham Gaia application was found to be exposing multiple unauthenticated endpoints...

EUVD-2023-35309

Gotham Gaia application was found to be exposing multiple unauthenticated endpoints...

CVE-2023-30971

Technical details (affected components, versions, root cause, or exploit information) are not publicly available in the provided documents. Monitor for updates.

CVE-2024-49587

CVE-2024-49587 concerns Glutton V1: unauthenticated endpoints on Gotham stacks could let attackers access backend data (read/update/delete). The issue is confirmed across Red Hat/NVD/CVE listings and related feeds, with a documented root cause of exposed service endpoints and no user authenticati...

CVE-2024-49587 Glutton V1 endpoints missing authentication

Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed...

CVE-2024-49587 Glutton V1 endpoints missing authentication

Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed...

EUVD-2024-55358

Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed...

PT-2025-52487

Name of the Vulnerable Software and Affected Versions Glutton V1 affected versions not specified Description The Glutton V1 service had exposed endpoints on Gotham stacks without authentication. This allowed users without proper permissions to directly access the Glutton backend, potentially...

PT-2025-52486

Gotham Gaia application was found to be exposing multiple unauthenticated endpoints...

EUVD-2023-35306

Malicious code in bioql PyPI...

EUVD-2022-32379

Malicious code in bioql PyPI...

EUVD-2023-35305

Malicious code in bioql PyPI...

EUVD-2023-35300

Malicious code in bioql PyPI...

EUVD-2022-51006

Malicious code in bioql PyPI...

EUVD-2022-32385

Malicious code in bioql PyPI...

EUVD-2023-35299

Malicious code in bioql PyPI...

EUVD-2022-32380

Malicious code in bioql PyPI...

EUVD-2023-35308

Malicious code in bioql PyPI...

CVE-2023-30970

Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system...