lakeFS vulnerable to authenticated users deleting files they are not authorized to delete

Mô tả

Tham khảo

• treeverse/lakeFS security advisory · WEB
• treeverse/lakeFS commit 81182bf · WEB
• treeverse/lakeFS · PACKAGE

Lỗ hổng khác của github.com/treeverse/lakefs

• CVE-2026-26187CAO 8.1lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to 1.77.0, the local block adapter (pkg/blo…
• CVE-2025-68671TRUNG BÌNH 4.8lakeFS is an open-source tool that transforms object storage into a Git-like repositories. LakeFS's S3 gateway does not validate timestamps …
• CVE-2025-64179TRUNG BÌNH 5.3lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authenticat…
• CVE-2025-27100TRUNG BÌNH 6.5lakeFS is an open-source tool that transforms your object storage into a Git-like repository. In affected versions an authenticated user can…
• CVE-2024-43784TRUNG BÌNH 5.7lakeFS is an open-source tool that transforms object storage into a Git-like repository. Existing lakeFS users who have issued credentials t…