CVE-2026-92791 Uber Kraken through 0.1.29 Path Traversal via tag parameter

Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...

EUVD-2026-81054

Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...

CVE-2026-92791: Improper Limitation of a Pathname to a Restricted Directory

Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/tag endpoint, allowing unauthenticated attackers to traverse outside the configured storage root. Attackers can use percent-encoded parent-directory segments in the tag parameter to read arbitrary files accessible to the...

PT-2026-94068

Name of the Vulnerable Software and Affected Versions Uber Kraken versions 0.1.0 through 0.1.29 Description An issue exists where the application fails to validate the tag parameter in the '/tags/tag' endpoint. This allows unauthenticated attackers to perform directory traversal by using...

EUVD-2023-0487

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-47747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs. CVE-2022-47747 Note that Nessus relies on the presence of the package as...

CVE-2022-47747

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

GO-2023-1505 Arbitrary file read vulnerability in github.com/uber/kraken

kraken contains an arbitrary file read vulnerability via component testfs...

GHSA-HJ4G-4W36-X8HP Kraken has arbitrary file read vulnerability via component testfs

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

UBUNTU-CVE-2022-47747

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

Design/Logic Flaw

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

CVE-2022-47747

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

CVE-2022-47747

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

Kraken path traversal vulnerability

Uber Technologies kraken is a P2P-powered Docker registry from Uber Technologies. A path traversal vulnerability exists in kraken 0.1.4 and earlier versions, which stems from an arbitrary file read vulnerability via the component testfs...

CVE-2022-47747

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

CVE-2022-47747

CVE-2022-47747 concerns the Kraken project. The initial data and connected documents confirm an arbitrary file read vulnerability in Kraken <= 0.1.4, exploitable via the component testfs. The CVE details indicate high confidentiality impact (C/H) with no integrity or availability impact report...

CVE-2022-47747

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

CVE-2022-47747

kraken = 0.1.4 has an arbitrary file read vulnerability via the component testfs...

PT-2023-15473 · Kraken · Kraken

Name of the Vulnerable Software and Affected Versions: kraken versions 0.1.4 and earlier Description: The issue is related to an arbitrary file read vulnerability. It affects the component testfs. Recommendations: For kraken versions 0.1.4 and earlier, consider restricting access to the testfs...