Vulnerabilities

TI-2026-25257 CVE-2026-32768 · GHSA-mw24-f3xh-j3qv

Chall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace

MEDIUM 40

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.

CVSS 4.0HIGH 7.9 Network No auth No interaction EPSS 0.00302 Published 2026-03-20 Fixed in 0.6.5 CWE-284

TI-2025-33561 CVE-2025-53634 · GHSA-ggmv-j932-q89q

MEDIUM 44

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00508 Published 2025-07-10 Fixed in 0.1.4 CWE-770

TI-2025-33560 CVE-2025-53633 · GHSA-r7fm-3pqm-ww5w

MEDIUM 44

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00527 Published 2025-07-10 Fixed in 0.1.4 CWE-405

TI-2025-33559 CVE-2025-53632 · GHSA-3gv2-v3jx-r9fh

MEDIUM 40

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00822 Published 2025-07-10 Fixed in 0.1.4 CWE-22