Repository navigation
Security: chipster/chipster-web-server
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Files opened from the file-broker run scripts on the Chipster originGHSA-f92j-54qj-53mf published
Oct 20, 2026 by klemelaHigh -
Job metadata files can replace Python modules and run code in the compute podGHSA-r6c2-276p-975p published
Sep 29, 2026 by klemelaCritical -
Session and dataset tokens can be valid for years and survive unsharingGHSA-fmcp-jqqw-xvp7 published
Sep 29, 2026 by klemelaHigh -
User tokens can be renewed past the maximum login lifetimeGHSA-qqc4-mxvq-3763 published
Sep 29, 2026 by klemelaModerate -
XML External Entity (XXE) injection in session import allows arbitrary file read and SSRF from session-workerGHSA-2pjx-3gv6-65gj published
Sep 29, 2026 by klemelaHigh -
Session and dataset tokens can create and delete sharing rulesGHSA-mxrv-mrfj-3hv7 published
Sep 29, 2026 by klemelaModerate -
Deleting a sharing rule through another session's URL lets any user delete sessions they can only readGHSA-gmg9-cpcv-gc8w published
Sep 29, 2026 by klemelaHigh
Learn more about advisories related to chipster/chipster-web-server in the GitHub Advisory Database