The list of supported versions can be found here.
To report a security vulnerability to us, visit our HackerOne page and submit a report to us with full details, including steps to reproduce the issue.
Security: gravitational/teleport
Security
SECURITY.md
-
SSRF to arbitrary hosts is possible from low privileged usersGHSA-hw4x-mcx5-9q36 published
Dec 29, 2023 by reedlodenCritical -
Access List owners can escalate their privilegesGHSA-76cc-p55w-63g3 published
Dec 29, 2023 by reedlodenCritical -
SFTP is possible on the Proxy server for any user with SFTP accessGHSA-c9v7-wmwj-vf6x published
Dec 29, 2023 by reedlodenHigh -
User-provided environment values allow execution on macOS agentsGHSA-vfxf-76hv-v4w4 published
Dec 29, 2023 by reedlodenHigh
Learn more about advisories related to gravitational/teleport in the GitHub Advisory Database