Advisories · Technology
judge0.
Every CVE that names judge0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
SSRF into Sandbox Escape through Unsafe Default Configuration
- judge0
- Server-side request forgery (SSRF)
- CWE-1393
- CVSS 10.0 CriticalCritical · CVSS 9+
Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link
- judge0
- Path traversal
- CWE-61
- CVSS 10.0 CriticalCritical · CVSS 9+
Judge0 vulnerable to Sandbox Escape via Symbolic Link
- judge0
- Path traversal
- CWE-61