如果您发现安全问题，请通过以下方式联系我们：
我们会尽快跟进处理。感谢您的支持！
If you discover a security issue, please report it through the contact below:
We will follow up as soon as possible. Thanks for your support!
Security: 1Panel-dev/KubePi
Security
SECURITY.md
-
JWT token validation has a defectGHSA-8q5r-cvcw-4wx7 published
Jul 25, 2024 by wanghe-fit2cloudModerate -
Leak password hash of any userGHSA-87f6-8gr7-pc6h published
Jul 21, 2023 by wanghe-fit2cloudModerate -
Privilege Escalation in kubeoperator/kubepiGHSA-757p-vx43-fp9r published
Jul 21, 2023 by wanghe-fit2cloudCritical -
A session fixation attack allows an attacker to hijack a legitimate user session.GHSA-v4w5-r2xc-7f8h published
Jan 9, 2023 by wanghe-fit2cloudHigh -
Unauthorized access to system APIGHSA-gqx8-hxmv-c4v4 published
Jan 9, 2023 by wanghe-fit2cloudHigh -
Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT tokenGHSA-vjhf-8vqx-vqpq published
Jan 4, 2023 by liqiang-fit2cloudCritical
Learn more about advisories related to 1Panel-dev/KubePi in the GitHub Advisory Database