Quenary Tugtainer vulnerabilities
- quenary tugtainerTugtainer: OIDC id_token claims accepted without signature/audience/expiry verification8.1 High
- quenary tugtainerTugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint9.1 Critical
- quenary tugtainerTugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset9.8 Critical
- quenary tugtainerTugtainer: OIDC login remains accessible when OIDC_ENABLED is false9.4 Critical
- quenary tugtainerTugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution9.9 Critical
- quenary tugtainerTugtainer vulnerable to Password Exposure via URL Query Parameter8.1 High
- quenary tugtainerTugtainer has RCE in Agent Command Execution Api8.1 High