https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T21:20:11.217908+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-93336 fkie_cve-2026-93336 2026-10-23T21:20:11.242698+00:00

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or a user with only login permission) to read any application's charm resource in any model,  including container-registry credentials, via a crafted request naming an arbitrary unit.

 https://db.gcve.eu/vuln/ghsa-43hf-rrv4-hhf5 GHSA-43hf-rrv4-hhf5 2026-10-23T21:20:11.242781+00:00

Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or a user with only login permission) to read any application's charm resource in any model,  including container-registry credentials, via a crafted request naming an arbitrary unit.