Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: uber Clear all filters
TI-2026-62532 CVE-2026-92791 · GHSA-2jmw-fcwx-7j6h

Uber Kraken through 0.1.29 Path Traversal via tag parameter

Priority HIGH 77

Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/{tag} endpoint, allowing unauthenticated attackers to traverse outside the configured storage root.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00613 Published 2026-09-16 No fix listed CWE-22
TI-2026-52917 CVE-2026-75625 · GHSA-xpm6-xhxf-22h5

Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

Priority HIGH 74

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00241 Published 2026-08-18 No fix listed CWE-354