infrahub-server@1.4.3 vulnerabilities
Infrahub is taking a new approach to Infrastructure Management by providing a new generation of datastore to organize and control all the data that defines how an infrastructure should run.
latest version
1.4.7
latest non vulnerable version
first published
10 months ago
latest version published
3 days ago
licenses detected
- [1.3.4,)
Direct Vulnerabilities
Known vulnerabilities in the infrahub-server package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
infrahub-server is an Infrahub is taking a new approach to Infrastructure Management by providing a new generation of datastore to organize and control all the data that defines how an infrastructure should run. Affected versions of this package are vulnerable to Improper Validation of Certificate Expiration via the authentication process. An attacker can gain unauthorized access by using API tokens that have been deleted or expired but are still associated with an active user account. How to fix Improper Validation of Certificate Expiration? Upgrade | [,1.3.9)[1.4.0,1.4.5) |