Latest security vulnerabilities, research findings, and insights from our security research team.
Four cross-tenant authorization flaws in Coolify let any team member steal other teams' SSH and GitHub App keys, mint live GitHub tokens, and delete environments. Full technical analysis, PoCs, and the v4.1.1 fixes.
Critical security vulnerability discovered in JumpServer allowing unauthorized access to connection tokens via API endpoint. Learn about the technical details, exploitation methods, and root cause analysis.
High-severity vulnerability in JumpServer allowing low-privilege users to extract LDAP credentials via WebSocket endpoint. Detailed analysis of the exploitation method and root cause.
