github.com/juju/juju vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-5774Mediumgithub.com/juju/juju: Juju: In-Memory Token Store for Discharge Tokens Lacks Concurrency Safety and Persistence CVE-2026-5412Criticalgithub.com/juju/juju: Juju: CloudSpec method leaking cloud credentials CVE-2025-68153Highgithub.com/juju/juju: Juju has a resource poisoning vulnerability CVE-2025-68152Mediumgithub.com/juju/juju: Juju: Read All Controller Logs From Compromised Workload CVE-2026-4370Criticalgithub.com/juju/juju: Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster CVE-2026-32694Mediumgithub.com/juju/juju: Juju affected by Confused Deputy IDOR attack via Predictable user specified ID in Juju Secrets CVE-2026-32693Highgithub.com/juju/juju: Juju has unauthorized access to out-of-scope Kubernetes secrets CVE-2026-32692Highgithub.com/juju/juju: Juju has unauthorized update of out-of-scope Vault secrets CVE-2026-32691Mediumgithub.com/juju/juju: Juju affected by timing ownership claim attack on new external back-end secrets CVE-2026-1237Lowgithub.com/juju/juju: Juju has broken CMR authorization CVE-2025-0928Highgithub.com/juju/juju: Juju allows arbitrary executable uploads via authenticated endpoint without authorization CVE-2025-53512Mediumgithub.com/juju/juju: Juju vulnerable to sensitive log retrieval via authenticated endpoint without authorization CVE-2025-53513Highgithub.com/juju/juju: Juju zip slip vulnerability via authenticated endpoint CVE-2024-8038Mediumgithub.com/juju/juju: Vulnerable juju introspection abstract UNIX domain socket CVE-2024-8037Mediumgithub.com/juju/juju: Vulnerable juju hook tool abstract UNIX domain socket CVE-2024-7558Mediumgithub.com/juju/juju: JUJU_CONTEXT_ID is a predictable authentication secret GHSA-6VJM-54VP-MXHXHighgithub.com/juju/juju: Juju's unprivileged user running on charm node can leak any secret or relation data accessible to…CVE-2023-0092Mediumgithub.com/juju/juju: Juju controller - Arbitrary file reading vulnerability CVE-2017-9232Criticalgithub.com/juju/juju: Juju uses a UNIX domain socket without setting appropriate permissions

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo