coolLabs Technologies vulnerabilities
We track 3 vulnerabilities in coolLabs Technologies products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2025.
Latest coolLabs Technologies vulnerabilities
- 8.8 High severity
Coolify: Improper Neutralization of Special Elements used in an OS Command
Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git Re
- 8.8 High severity
Coolify: Improper Control of Generation of Code
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directives
- 9.0 Critical severity
Coolify: Improper Neutralization of Input During Web Page Generation
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaSc