request

Mar 23, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 22, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 22, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 22, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 22, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 22, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 16, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 16, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 16, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 9, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 9, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ type DeviceGetPublicURL struct

+ type DeviceUpdate struct

+ Name *string

+ PublicURL *bool

Mar 8, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 6, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 6, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Mar 1, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 24, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 24, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 17, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 16, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 15, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 15, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 15, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 14, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 13, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 10, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 9, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 7, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 3, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Feb 1, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Jan 31, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Jan 26, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Jan 23, 2023 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 30, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 30, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 29, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 25, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 17, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 16, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 14, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 11, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 10, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 9, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 8, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 8, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 4, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Nov 1, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Oct 31, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Oct 28, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Oct 25, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Oct 19, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Sep 27, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Sep 14, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Sep 14, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Sep 13, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Sep 3, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Sep 2, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Sep 1, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ type Setup struct

+ Email string

+ Name string

+ Namespace string

+ Password string

+ Username string

Sep 1, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Aug 30, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Aug 25, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Aug 15, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Aug 17, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Aug 12, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Aug 10, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Jul 14, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Jul 8, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ type AuthTokenGet struct

+ type AuthTokenSwap struct

+ type DeviceAuth struct

+ Hostname string

+ Identity *DeviceIdentity

+ Info *DeviceInfo

+ PublicKey string

+ Sessions []string

+ TenantID string

+ type DeviceCreateTag struct

+ type DeviceDelete struct

+ type DeviceGet struct

+ type DeviceHeartbeat struct

+ type DeviceIdentity struct

+ MAC string

+ type DeviceInfo struct

+ Arch string

+ ID string

+ Platform string

+ PrettyName string

+ Version string

+ type DeviceLookup struct

+ Domain string

+ IPAddress string

+ Name string

+ Username string

+ type DeviceOffline struct

+ type DeviceParam struct

+ UID string

+ type DevicePendingStatus struct

+ Status string

+ type DeviceRemoveTag struct

+ type DeviceRename struct

+ Name string

+ type DeviceUpdateStatus struct

+ type DeviceUpdateTag struct

+ Tags []string

+ type FingerprintParam struct

+ Fingerprint string

+ type MemberParam struct

+ MemberUID string

+ type NamespaceAddUser struct

+ Username string

+ type NamespaceCreate struct

+ Name string

+ TenantID string

+ type NamespaceDelete struct

+ type NamespaceEdit struct

+ Name string

+ type NamespaceEditUser struct

+ type NamespaceGet struct

+ type NamespaceRemoveUser struct

+ type PublicKeyAuth struct

+ Data string

+ Fingerprint string

+ type PublicKeyCreate struct

+ Data []byte

+ Filter PublicKeyFilter

+ Fingerprint string

+ Name string

+ TenantID string

+ Username string

+ type PublicKeyDelete struct

+ type PublicKeyFilter struct

+ Hostname string

+ Tags []string

+ type PublicKeyGet struct

+ type PublicKeyTagAdd struct

+ type PublicKeyTagRemove struct

+ type PublicKeyTagsUpdate struct

+ Tags []string

+ type PublicKeyUpdate struct

+ Filter PublicKeyFilter

+ Name string

+ Username string

+ type RoleBody struct

+ Role string

+ type SessionAuthenticatedSet struct

+ Authenticated bool

+ type SessionCreate struct

+ DeviceUID string

+ IPAddress string

+ Term string

+ Type string

+ UID string

+ Username string

+ type SessionEditRecordStatus struct

+ SessionRecord bool

+ type SessionFinish struct

+ type SessionGet struct

+ type SessionIDParam struct

+ UID string

+ type SessionKeepAlive struct

+ type TagBody struct

+ Tag string

+ type TagDelete struct

+ type TagParam struct

+ Tag string

+ type TagRename struct

+ NewTag string

+ type TenantParam struct

+ Tenant string

+ type UserAuth struct

+ Password string

+ Username string

+ type UserDataUpdate struct

+ Email string

+ Name string

+ Username string

+ type UserParam struct

+ ID string

+ type UserPasswordUpdate struct

+ CurrentPassword string

+ NewPassword string

Jul 7, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Jul 4, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Jun 24, 2022 GO-2026-5113 +3 more

  GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

  GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

  GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

  GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub