Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/09/02 4:39 p.m.22 views

CVE-2026-79756 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...

8.7CVSS
SaveExploits0References4
Rows per page
Query Builder