authorizer

package

Go to main page

Versions in this module

v0

v0.27.0-rc.4

Aug 2, 2026

v0.27.0-rc.3

Jul 31, 2026

v0.27.0-rc.2

Jul 22, 2026

v0.27.0-rc.1

Jul 7, 2026

v0.26.0

Jul 6, 2026

v0.26.0-rc.1

Jul 3, 2026

v0.25.1

Jun 10, 2026

v0.25.1-rc.3

Jun 9, 2026

v0.25.1-rc.2

Jun 9, 2026

v0.25.1-rc.1

Jun 8, 2026

v0.25.0

Jun 6, 2026

Changes in this version

type Permission

+ const DeviceCustomFieldUpdate

+ const NamespaceDeviceAutoAccept

v0.25.0-rc.2

Jun 5, 2026

v0.25.0-rc.1

May 25, 2026

v0.24.2

Apr 29, 2026

v0.24.1

Apr 8, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.24.0

Apr 1, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.24.0-rc.1

Apr 1, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.1

Jun 3, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0

Apr 1, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.4

Mar 27, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.3

Mar 26, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.2

Mar 19, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.23.0-rc.1

Mar 16, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.22.0

Mar 10, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.22.0-rc.2

Mar 9, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.22.0-rc.1

Dec 19, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.7

Apr 23, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.6

Apr 22, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.5

Jan 7, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.4

Jan 2, 2026 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.3

Dec 5, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.2

Dec 4, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.1

Dec 2, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0

Nov 28, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

type Permission

+ const TagCreate

+ const TagDelete

+ const TagUpdate

type UserClaims

+ Admin bool

v0.21.0-rc.5

Nov 26, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.4

Nov 14, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.3

Nov 13, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.2

Oct 9, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.21.0-rc.1

Sep 26, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.1

Aug 25, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.1-rc.1

Aug 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0

Aug 8, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.5

Aug 8, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.4

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.3

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.2

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.20.0-rc.1

Aug 7, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.2

Jul 2, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.2-rc.2

Jun 30, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.2-rc.1

Jun 25, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.1

Jun 6, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.1-rc.2

Jun 3, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.1-rc.1

Jun 3, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0

May 29, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.9

May 29, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.8

May 28, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.7

May 26, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.6

May 23, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.5

May 22, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.4

May 22, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.3

May 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.2

May 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.19.0-rc.1

May 21, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.3

Feb 13, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.2

Feb 10, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.2-rc.2

Feb 6, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.2-rc.1

Feb 6, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.1

Feb 3, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0

Jan 31, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

type Permission

+ const TunnelsCreate

+ const TunnelsDelete

type UserClaims

+ Origin string

v0.18.0-rc.7

Jan 31, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.6

Jan 31, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.5

Jan 27, 2025 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.4

Dec 18, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.3

Dec 17, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.2

Dec 11, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.18.0-rc.1

Dec 6, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2

Nov 13, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2-rc.3

Nov 12, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2-rc.2

Nov 8, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.2-rc.1

Nov 6, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.1

Nov 5, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.1-rc.1

Nov 4, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0

Oct 28, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ type DeviceClaims struct

+ TenantID string

+ UID string

type Permission

+ const ConnectorDelete

+ const ConnectorSet

+ const ConnectorUpdate

+ type UserClaims struct

+ ID string

+ MFA bool

+ Role Role

+ TenantID string

+ Username string

v0.17.0-rc.4

Oct 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0-rc.3

Oct 24, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0-rc.2

Oct 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.17.0-rc.1

Oct 8, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.4

Sep 27, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.3

Sep 26, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.2

Sep 17, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.1

Aug 26, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.0

Jul 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

Changes in this version

+ type Permission int

+ const APIKeyCreate

+ const APIKeyDelete

+ const APIKeyUpdate

+ const BillingAddPaymentMethod

+ const BillingCancelSubscription

+ const BillingChooseDevices

+ const BillingCreateCustomer

+ const BillingCreateSubscription

+ const BillingGetPaymentMethod

+ const BillingGetSubscription

+ const BillingRemovePaymentMethod

+ const BillingUpdatePaymentMethod

+ const DeviceAccept

+ const DeviceConnect

+ const DeviceCreateTag

+ const DeviceDeleteTag

+ const DeviceDetails

+ const DeviceReject

+ const DeviceRemove

+ const DeviceRemoveTag

+ const DeviceRename

+ const DeviceRenameTag

+ const DeviceUpdate

+ const DeviceUpdateTag

+ const FirewallAddTag

+ const FirewallCreate

+ const FirewallEdit

+ const FirewallRemove

+ const FirewallRemoveTag

+ const FirewallUpdateTag

+ const NamespaceAddMember

+ const NamespaceDelete

+ const NamespaceEditMember

+ const NamespaceEnableSessionRecord

+ const NamespaceRemoveMember

+ const NamespaceUpdate

+ const PublicKeyAddTag

+ const PublicKeyCreate

+ const PublicKeyEdit

+ const PublicKeyRemove

+ const PublicKeyRemoveTag

+ const PublicKeyUpdateTag

+ const SessionClose

+ const SessionDetails

+ const SessionPlay

+ const SessionRemove

+ type Role string

+ const RoleAdministrator

+ const RoleInvalid

+ const RoleObserver

+ const RoleOperator

+ const RoleOwner

+ func RoleFromString(str string) Role

+ func (r Role) HasAuthority(passive Role) bool

+ func (r Role) HasPermission(permission Permission) bool

+ func (r Role) Permissions() []Permission

+ func (r Role) String() string

v0.16.0-rc.2

Jul 15, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

v0.16.0-rc.1

Jul 11, 2024 GO-2026-5113 +3 more

GO-2026-5113: ShellHub has crash-DoS via field injection in filter and sort-by parameters in github.com/shellhub-io/shellhub

GO-2026-5302: ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

GO-2026-5453: ShellHub has cross-tenant IDOR in `GET /api/devices/:uid` that discloses device data of any namespace in github.com/shellhub-io/shellhub

GO-2026-5680: ShellHub has cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check in github.com/shellhub-io/shellhub

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL