Vulnerability Database

318,275

Total vulnerabilities in the database

Vulnerabilities for products matching "github.com-treeverse-lakefs"

Found 1 matching product.

You can search for specific versions with /product/github.com-treeverse-lakefs/1.2.3

github.com/treeverse/lakefs

8 vulnerabilities found

Title	Severity	Exploit	Date	Affected Version
CVE-2025-64179	Medium		November 6, 2025 11/6/25	< 1.71.0
CVE-2025-27100	Medium		February 21, 2025 2/21/25	< 1.50.0
User with ci:ReadAction permissions and write permissions to one path in a repository may copy objects from any path in the repository	Medium		February 22, 2024 2/22/24	>= 0.90.0 < 1.12.1
lakeFS logs S3 credentials in plain text	High		December 12, 2023 12/12/23	< 0.101.0
User with permission to write actions can impersonate another user when auth token is configured in environment variable	Medium		December 12, 2023 12/12/23	< 1.3.1
lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files	Medium		August 14, 2023 8/14/23	< 0.106.0
lakeFS vulnerable to authenticated users deleting files they are not authorized to delete	High		September 23, 2022 9/23/22	< 0.82.0
Improper Access Control in github.com/treeverse/lakefs	Medium		October 28, 2021 10/28/21	< 0.53.1

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime