Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/06 5:05 p.m.19 views

DevSpace UI Server WebSocket CheckOrigin does not validate source

Description DevSpace's UI server WebSocket accepts connections from all origins by default, and therefore several endpoints are exposed via this WebSocket. When a developer runs the DevSpace UI and at the same time uses a browser to access the internet, a malicious website they visit can use thei...

7.8CVSS5.9AI score0.00152EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder