JuiceFS WebDAV Unauth Access to /debug/pprof and /metrics Leading to Info Disclosure and DoS

github.com 2026-07-03查看中文 →

Security Advisory#7213Highjuicedata

Affected:

juicefs v1.3.1
juicefs HEAD (commit 7fbb7f)

Referenced CVEs: CVE-2026-59092 · 7.7

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

xxl-job-admin < 3.4.0 CSRF Vulnerability Allows Unauthorized Glue IDE Script Modification 2026-07-16 NanoMQ v0.24.9 Memory Leak DoS Vulnerability (CVE-2026-36590) with POC 2026-07-16 CVE-2026-36590: EMQ NanoMQ Memory Leak DoS Vulnerability Analysis and Fix 2026-07-16 Dulwich Git Library Truncated Delta Header Parsing Vulnerability 2026-07-16 Sandboxie GuiServer Unrestricted APC Injection Sandbox Escape (RCE) 2026-07-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive