Advisories · Technology
kan.
Every CVE that names kan among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment
- kan
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
kan through 0.6.0 Authorization Bypass via GitHub Project Import
- kan
- Broken access control
- CVSS 8.6 HighCritical · CVSS 7+ and EPSS
Kan is Vulnerable to Unauthenticated SSRF via Attachment Download Endpoint
- kan
- Server-side request forgery (SSRF)