https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:20:11 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-93336 <p>Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or a user with only login permission) to read any application&#39;s charm resource in any model,  including container-registry credentials, via a crafted request naming an arbitrary unit.</p> <p>Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or a user with only login permission) to read any application&#39;s charm resource in any model,  including container-registry credentials, via a crafted request naming an arbitrary unit.</p> https://db.gcve.eu/vuln/fkie_cve-2026-93336 https://db.gcve.eu/vuln/ghsa-43hf-rrv4-hhf5 <p>Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or a user with only login permission) to read any application&#39;s charm resource in any model,  including container-registry credentials, via a crafted request naming an arbitrary unit.</p> <p>Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or a user with only login permission) to read any application&#39;s charm resource in any model,  including container-registry credentials, via a crafted request naming an arbitrary unit.</p> https://db.gcve.eu/vuln/ghsa-43hf-rrv4-hhf5