Blakeblackshear vulnerabilities
We track 8 vulnerabilities in Blakeblackshear products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2026.
Latest Blakeblackshear vulnerabilities
- 7.7 High severity
frigate: Incorrect Authorization
Frigate is an open source network video recorder. Prior to 0.18.0, the prefix-matched location /api/go2rtc/api in docker/main/rootfs/usr/local/nginx/conf/nginx.conf requires authentication but does not require an administrator role for GET requests, exposing t
- 8.1 High severity
frigate: Missing Authorization
Frigate is an open source network video recorder. Prior to 0.17.2, the WebSocket handler in frigate/comms/ws.py forwards attacker-selected message topics to the dispatcher without checking the authenticated user's role because the nginx authentication subreque
- 8.1 High severity
frigate: Improper Privilege Management
Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} endpoint allows any authenticated user including the viewer role to download Frigate and nginx logs, exposing auto-generated admin passwords and camera credentials
- 8.1 High severity
frigate: Improper Authorization
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. In versions 0.16.2 and below, users with the viewer role can delete admin and low-privileged user accounts. Exploitation can lead to DoS and affect data integrity. T
- 8.8 High severity
frigate: Improper Authentication
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Versions prior to 0.17.0-beta1 allow any authenticated user to change their own password without verifying the current password through the /users/{username}/passwor
- 9.1 Critical severity
frigate: Improper Neutralization of Special Elements used in an OS Command
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critical Remote Command Execution (RCE) vulnerability has been identified in the Frigate integration with go2rtc. The application does not sanitiz
- 7.7 High severity
frigate: External Control of File Name or Path
Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.2, Frigate's export workflow allows an authenticated operator to nominate any filesystem location as the thumbnail source for a video export. Because t
- 7.5 High severity
frigate: Deserialization of Untrusted Data
Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, an unsafe deserialization vulnerability was identified in the endpoints used to save configurations for Frigate. This can lead to unauthenticated remote code execution. This can