Advisories · Technology
coollabsio coolify.
Every CVE that names coollabsio coolify among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Coolify has Git Repository RCE
- coollabsio coolify
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Coolify has Docker Compose Injection issue
- coollabsio coolify
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path
- coollabsio coolify
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename
- coollabsio coolify
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename
- coollabsio coolify
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import
- coollabsio coolify
- Command injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup
- coollabsio coolify
- Command injection
- CVSS 1.3 Low
Coolify Vulnerable to Reflected XSS on Tag Search
- coollabsio coolify
- CWE-116
- CVSS 10.0 CriticalCritical · CVSS 9+
Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)
- coollabsio coolify
- Information disclosure
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)
- coollabsio coolify
- Broken access control
- CVSS 5.7 Medium
Coolify Vulnerable to OAuth Secrets Leak
- coollabsio coolify
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)
- coollabsio coolify
- Broken access control
- CVSS 6.5 Medium
Coolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS)
- coollabsio coolify
- Broken access control
- CVSS 4.7 Medium
Coolify Vulnerable to GitHub / GitLab OAuth Secrets Leak
- coollabsio coolify
- Information disclosure
- Broken access control
- CVSS 8.5 High
Coolify Command Injection Vulnerability in Project Name
- coollabsio coolify
- Command injection
- CVSS 8.5 High
Coolify OS Command Injection Vulnerability in SSH Command Generation
- coollabsio coolify
- Command injection