Netfoundry - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2026-07-16.

Products

CVE-2026-45576 - CVSS 8.3 (high), 2026-07-16: zrok is software for sharing web services, files, and network resources. From 0.4.23 until 2.0.3, `zrok2 copy` stores attacker-controlled WebDAV or zrok drive…
CVE-2026-45568 - CVSS 9.9 (critical), 2026-07-16: zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts an absolute…
CVE-2026-42275 - CVSS 8.7 (high), 2026-05-08: zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path…
CVE-2026-40304 - CVSS 5.3 (medium), 2026-04-17: zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the unaccess handler (controller/unaccess.go) contains a…
CVE-2026-40303 - CVSS 7.5 (high), 2026-04-17: zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, endpoints.GetSessionCookie parses an attacker-supplied cookie…
CVE-2026-40302 - CVSS 6.1 (medium), 2026-04-17: zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the proxyUi template engine uses Go's text/template (which…