| CVE-2026-93336 |
Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…
|
7.1
Élevée
|
22 oct. 2026 |
| CVE-2026-5412 |
In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade
|
9.9
Critique
|
10 avr. 2026 |
| CVE-2026-5774 |
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow…
|
6.1
Moyenne
|
10 avr. 2026 |
| CVE-2026-4370 |
A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the…
|
10.0
Critique
|
1 avr. 2026 |
| CVE-2026-32694 |
In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret…
|
6.6
Moyenne
|
18 mars 2026 |
| CVE-2026-32693 |
In Juju from version 3.0.0 through 3.6.18, the authorization of the "secret-set" tool is not performed correctly,…
|
8.8
Élevée
|
18 mars 2026 |
| CVE-2026-32692 |
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18…
|
7.6
Élevée
|
18 mars 2026 |
| CVE-2026-32691 |
A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated…
|
5.3
Moyenne
|
18 mars 2026 |
| CVE-2026-1237 |
Vulnerable cross-model authorization in juju
|
2.1
Faible
|
28 janv. 2026 |
| CVE-2025-0928 |
In Juju versions prior to 3.6.8 and 2.9.52, any authenticated controller user was allowed to upload arbitrary agent…
|
8.8
Élevée
|
8 juil. 2025 |
| CVE-2025-53513 |
The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on…
|
8.8
Élevée
|
8 juil. 2025 |
| CVE-2025-53512 |
The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access…
|
6.5
Moyenne
|
8 juil. 2025 |
| CVE-2024-6984 |
An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged…
|
8.8
Élevée
|
29 juil. 2024 |