Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

getarcaneapp — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting getarcaneapp. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability records for the vendor getarcaneapp, focusing on reported security weaknesses affecting their products. It collects disclosures related to application security flaws, specifically within a defined historical period. Users can track the vendor's advisory history, understand common weakness classes, and review the vulnerability record for specific products. The collection serves as a centralized reference for monitoring how getarcaneapp addresses software defects over time, without including individual CVE identifiers.

Top products by getarcaneapp: arcane
CVE ID Title CVSS Severity Published
CVE-2026-86114 Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints — arcane CWE-862 6.5 Medium 2026-09-05
CVE-2026-45625 Arcane: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs — arcane CWE-862 9.9 Critical 2026-05-29
CVE-2026-45626 Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameter — arcane CWE-78 6.3 Medium 2026-05-29
CVE-2026-45627 Arcane: Unauthenticated reflected XSS via SVG color parameter in /api/app-images/logo enables admin account takeover — arcane CWE-79 8.2 High 2026-05-29
CVE-2026-47125 Arcane: Missing admin authorization on global variables endpoint — arcane CWE-862 8.8 High 2026-05-29
CVE-2026-47179 Arcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in Arcane — arcane CWE-22 7.7 High 2026-05-29
CVE-2026-42461 Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) — arcane CWE-862 7.5 - 2026-05-09
CVE-2026-40242 Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint — arcane CWE-918 7.2 High 2026-04-10
CVE-2026-23944 Arcane allows unauthenticated proxy access to remote environments — arcane CWE-306 8.6AI High AI 2026-01-19
CVE-2026-23520 Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE — arcane CWE-78 9.1 Critical 2026-01-15

This page lists every published CVE security advisory associated with getarcaneapp. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.