internalclient

package

Go to main page

Versions in this module

v0

v0.27.0-rc.2

Jul 22, 2026

v0.27.0-rc.1

Jul 7, 2026

v0.26.0

Jul 6, 2026

v0.26.0-rc.1

Jul 3, 2026

v0.25.1

Jun 10, 2026

v0.25.1-rc.3

Jun 9, 2026

v0.25.1-rc.2

Jun 9, 2026

v0.25.1-rc.1

Jun 8, 2026

v0.25.0

Jun 6, 2026

v0.25.0-rc.2

Jun 5, 2026

v0.25.0-rc.1

May 25, 2026

v0.24.2

Apr 29, 2026

v0.24.1

Apr 8, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.24.0

Apr 1, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.24.0-rc.1

Apr 1, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.1

Jun 3, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0

Apr 1, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.4

Mar 27, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.3

Mar 26, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.2

Mar 19, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.1

Mar 16, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.22.0

Mar 10, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.22.0-rc.2

Mar 9, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.22.0-rc.1

Dec 19, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.7

Apr 23, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.6

Apr 22, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.5

Jan 7, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.4

Jan 2, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.3

Dec 5, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.2

Dec 4, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.1

Dec 2, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0

Nov 28, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ var ErrRequestFailed = errors.New("request failed")

+ func HasError(resp *resty.Response, err error) error

+ type Config struct

+ APIBaseURL string

+ EnterpriseBaseURL string

+ RetryCount int

+ RetryMaxWaitTime int

+ RetryWaitTime int

+ func DefaultConfig() (*Config, error)

+ func NewConfigFromEnv() (*Config, error)

+ type Error struct

+ Code int

+ Message string

+ func (e *Error) Error() string

type WebEndpoint

+ TLS WebEndpointTLS

+ type WebEndpointTLS struct

+ Domain string

+ Enabled bool

+ Verify bool

v0.21.0-rc.5

Nov 26, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.4

Nov 14, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.3

Nov 13, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.2

Oct 9, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.1

Sep 26, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.1

Aug 25, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

type WebEndpoint

+ DeviceUID string

v0.20.1-rc.1

Aug 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0

Aug 8, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ type WebEndpoint struct

+ Address string

+ CreatedAt time.Time

+ Device string

+ ExpiresIn time.Time

+ Host string

+ Namespace string

+ Port int

+ TimeToLive int

v0.20.0-rc.5

Aug 8, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.4

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.3

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.2

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.1

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.2

Jul 2, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.2-rc.2

Jun 30, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.2-rc.1

Jun 25, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.1

Jun 6, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.1-rc.2

Jun 3, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.1-rc.1

Jun 3, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0

May 29, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.9

May 29, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.8

May 28, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.7

May 26, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.6

May 23, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.5

May 22, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.4

May 22, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.3

May 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.2

May 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.1

May 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.3

Feb 13, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.2

Feb 10, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.2-rc.2

Feb 6, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.2-rc.1

Feb 6, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.1

Feb 3, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0

Jan 31, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ var ErrForbidden = errors.New("forbidden")

+ type Tunnel struct

+ Address string

+ CreatedAt time.Time

+ Device string

+ ExpiresIn time.Time

+ Host string

+ Namespace string

+ Port int

+ TimeToLive int

v0.18.0-rc.7

Jan 31, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.6

Jan 31, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.5

Jan 27, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.4

Dec 18, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.3

Dec 17, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.2

Dec 11, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.1

Dec 6, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2

Nov 13, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2-rc.3

Nov 12, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2-rc.2

Nov 8, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2-rc.1

Nov 6, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.1

Nov 5, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.1-rc.1

Nov 4, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0

Oct 28, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ func WithAsynqWorker(redisURI string) clientOption

v0.17.0-rc.4

Oct 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0-rc.3

Oct 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0-rc.2

Oct 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0-rc.1

Oct 8, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.4

Sep 27, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.3

Sep 26, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.2

Sep 17, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.1

Aug 26, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.0

Jul 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.0-rc.2

Jul 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.0-rc.1

Jul 11, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.2-rc.1

May 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.1

May 3, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.1-rc.3

Apr 30, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.1-rc.2

Apr 30, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.1-rc.1

Apr 29, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.0

Apr 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.0-rc.6

Apr 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.0-rc.5

Apr 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.0-rc.4

Apr 22, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.0-rc.3

Apr 16, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.0-rc.2

Apr 12, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.15.0-rc.1

Feb 13, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.3

Feb 1, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.3-rc.1

Jan 31, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.2

Jan 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.1

Jan 16, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.0

Jan 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

type Client

+ func NewClientWithAsynq(uri string) Client

v0.14.0-rc.7

Jan 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.0-rc.6

Jan 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.0-rc.5

Jan 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.0-rc.4

Jan 12, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.0-rc.3

Jan 11, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.0-rc.2

Jan 11, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.14.0-rc.1

Jan 10, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.6

Dec 5, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.6-rc.3

Dec 4, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.6-rc.2

Dec 4, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.6-rc.1

Nov 28, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.5

Nov 23, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.5-rc.2

Nov 23, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.5-rc.1

Nov 23, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.4

Nov 13, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.4-rc.2

Nov 9, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.4-rc.1

Nov 9, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.3

Nov 8, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.3-rc.1

Nov 8, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.2

Nov 2, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.1

Nov 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0

Nov 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.12

Nov 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.11

Oct 31, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.10

Oct 31, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.9

Oct 31, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.8

Oct 30, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.7

Oct 26, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.6

Oct 24, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.5

Oct 23, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.4

Oct 20, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.3

Oct 9, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.2

Oct 5, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.13.0-rc.1

Oct 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5

Sep 6, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ type Options struct

+ Asynq *asynq.Client

v0.12.5-rc.11

Sep 5, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.10

Sep 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.9

Aug 31, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.8

Aug 30, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.7

Aug 28, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.6

Aug 7, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.5

Aug 4, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.4

Aug 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.3

Aug 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.2

Aug 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.5-rc.1

Aug 2, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.4

Aug 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.4-rc.5

Aug 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.4-rc.4

Jul 24, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.4-rc.3

Jul 21, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.4-rc.2

Jul 21, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.4-rc.1

Jul 20, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.3

Jun 21, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.2

Jun 14, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.2-rc.6

Jun 6, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.2-rc.5

Jun 6, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.2-rc.4

Jun 6, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.2-rc.3

May 18, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.2-rc.2

May 17, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.2-rc.1

May 12, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.1

May 12, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.1-rc.3

May 12, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.1-rc.2

May 11, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.1-rc.1

May 11, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.0

May 4, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.0-rc.4

May 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.0-rc.3

May 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.0-rc.2

May 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.12.0-rc.1

May 2, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.8

Apr 27, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.8-rc.5

Apr 26, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.8-rc.4

Apr 26, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.8-rc.3

Apr 26, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.8-rc.2

Apr 20, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.8-rc.1

Apr 20, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7

Mar 23, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.8

Mar 22, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.7

Mar 22, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.6

Mar 22, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.5

Mar 22, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.4

Mar 22, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.3

Mar 16, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.2

Mar 16, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.7-rc.1

Mar 16, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.6

Mar 9, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.5

Mar 9, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.4

Mar 8, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.3

Mar 6, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.3-rc.2

Mar 6, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.3-rc.1

Mar 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.2

Feb 24, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.2-rc.1

Feb 24, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.1

Feb 17, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.1-rc.1

Feb 16, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0

Feb 15, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.8

Feb 15, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.7

Feb 15, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.6

Feb 14, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.5

Feb 13, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.4

Feb 10, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.3

Feb 9, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.2

Feb 7, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.11.0-rc.1

Feb 3, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.10

Feb 1, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ var ErrFirewallBlock = errors.New("a firewall rule prohibit this connection")

+ var ErrFirewallConnection = errors.New("failed to make the request to evaluate the firewall")

v0.10.10-rc.3

Jan 31, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.10-rc.2

Jan 26, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.10-rc.1

Jan 23, 2023 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.9

Nov 30, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.9-rc.3

Nov 30, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.9-rc.2

Nov 29, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.9-rc.1

Nov 25, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.8

Nov 17, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.8-rc.1

Nov 16, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.7

Nov 14, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.7-rc.5

Nov 11, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.7-rc.4

Nov 10, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.7-rc.3

Nov 9, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.7-rc.2

Nov 8, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.7-rc.1

Nov 8, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.6

Nov 4, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.5

Nov 1, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.5-rc.3

Oct 31, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.5-rc.2

Oct 28, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.5-rc.1

Oct 25, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.4

Oct 19, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.3

Sep 27, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.2

Sep 14, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.2-rc.2

Sep 14, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.2-rc.1

Sep 13, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.1

Sep 3, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.1-rc.1

Sep 2, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.0

Sep 1, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.0-rc.3

Sep 1, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.0-rc.2

Aug 30, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.10.0-rc.1

Aug 25, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.6

Aug 15, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.6-rc.2

Aug 17, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.6-rc.1

Aug 12, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.5

Aug 10, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.4

Jul 14, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.3

Jul 8, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.3-rc.4

Jul 7, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.3-rc.3

Jul 4, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.3-rc.2

Jun 24, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.3-rc.1

May 30, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.2

Apr 29, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.2-rc.2

Apr 27, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.2-rc.1

Apr 22, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1

Apr 5, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.8

Apr 4, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.7

Mar 31, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.6

Mar 30, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.5

Mar 23, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.4

Mar 22, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.3

Mar 18, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.2

Feb 25, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.1-rc.1

Feb 25, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.9.0

Feb 7, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

type LeveledLogger

+ func (l *LeveledLogger) Debugf(msg string, keysAndValues ...interface{})

+ func (l *LeveledLogger) Errorf(msg string, keysAndValues ...interface{})

+ func (l *LeveledLogger) Warnf(msg string, keysAndValues ...interface{})

v0.8.3-rc.5

Feb 7, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.3-rc.4

Feb 4, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.3-rc.3

Feb 4, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.3-rc.2

Jan 31, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.3-rc.1

Jan 25, 2022 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.2

Dec 21, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.2-rc.6

Dec 20, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.2-rc.5

Dec 20, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.2-rc.4

Dec 20, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.2-rc.3

Dec 17, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.2-rc.2

Dec 9, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.2-rc.1

Dec 3, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.1

Nov 17, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.0

Nov 8, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ const DeviceUIDHeader

+ var ErrConnectionFailed = errors.New("connection failed")

+ var ErrNotFound = errors.New("not found")

+ var ErrUnknown = errors.New("unknown error")

+ type Client interface

+ func NewClient(opts ...Opt) Client

+ type LeveledLogger struct

+ Logger *logrus.Logger

+ type Opt func(*client) error

v0.8.0-rc.7

Nov 5, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.0-rc.6

Nov 1, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.0-rc.5

Oct 27, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.0-rc.4

Oct 26, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.0-rc.3

Oct 22, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.0-rc.2

Oct 21, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.8.0-rc.1

Oct 20, 2021 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL