Acme.sh Project vulnerabilities
We track 1 vulnerability in Acme.sh Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2025.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Acme.sh Project vulnerabilities
- 8.7 High severity
acme.sh: Password in Configuration File
The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout.