Read the docs

treeverse

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

treeverse records in CISA KEV

No treeverse vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records

Priority HIGH 70

lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setup_comm_prefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00555 Published 2026-07-24 Fixed CWE-306
Priority LOW 30

lakeFS is an open-source tool that transforms object storage into a Git-like repositories.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00288 Published 2025-11-06 Fixed in 1.71.0 CWE-200
Open these records in search →