Treeverse Lakefs vulnerabilities
- treeverse lakefs, lakefs-enterprise +1 more lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML 8.7 High
- lakefs lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs 6.9 Medium
- lakefs lakeFS vulnerable to path traversal in local block adapter allow cross-namespace and sibling directory access 8.1 High
- lakefs lakeFS is Missing Timestamp Validation in S3 Gateway Authentication 6.5 Medium
- treeverse lakefs lakeFS: Unauthenticated access to API usage metrics 5.3 Medium
- treeverse lakefs An authenticated user can crash lakeFS by exhausting server memory 6.5 Medium
- treeverse lakefs Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to it's deletion 5.7 Medium