Vulnerability	Vulnerable Version
C Use of Password Hash With Insufficient Computational Effort Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort in the BasicAuth authentication process. An attacker can recover administrator credentials by performing offline brute-force attacks against SHA-512 password hashes obtained from the database. This may allow further compromise, such as accessing sensitive tokens and secrets, especially in Kubernetes environments. How to fix Use of Password Hash With Insufficient Computational Effort? Upgrade `io.kestra:core` to version 1.3.24 or higher.	[,1.3.24)

Use of Password Hash With Insufficient Computational Effort

Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort in the BasicAuth authentication process. An attacker can recover administrator credentials by performing offline brute-force attacks against SHA-512 password hashes obtained from the database. This may allow further compromise, such as accessing sensitive tokens and secrets, especially in Kubernetes environments.

How to fix Use of Password Hash With Insufficient Computational Effort?

Upgrade io.kestra:core to version 1.3.24 or higher.

[,1.3.24)

Go back to all versions of this package