EUVD-2022-7380

Malicious code in bioql PyPI...

PT-2022-23178 · Kubevela · Kubevela

Name of the Vulnerable Software and Affected Versions: KubeVela versions prior to 1.4.11 and 1.5.4 Description: KubeVela is an application delivery platform that could be affected by an authentication bypass issue. The VelaUX APIServer uses the PlatformID as the signed key to generate JWT tokens...