Stork vulnerabilities

2 known vulnerabilities in Stork from ISC. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Stork: Logging of Excessive Data

  CVE-2025-8696Sep 10, 2025ISC

  If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server. This issue affects Stork versions 1.0.0 through 2.3.0.

• 8.1 High severity

  Stork: Improper Certificate Validation

  CVE-2024-28872Jul 11, 2024ISC

  The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to