L3montree-dev vulnerabilities
We track 2 vulnerabilities in L3montree-dev products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 19, 2026.
2vulnerabilities
1critical
1high
0exploited
8.2average CVSS score
Latest L3montree-dev vulnerabilities
- 7.1 High severity
devguard: Improper Authorization
DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a DevGuard API instance with one or more public assets, any authenticated user — including users from a different organization with no membership or role in the a
- 9.3 Critical severity
devguard: Authentication Bypass Using an Alternate Path or Channel
DevGuard provides vulnerability management for the full software supply chain. Prior to 1.2.2, the SessionMiddleware accepts a client-supplied X-Admin-Token HTTP request header and uses its raw string value as the authenticated userID when no Kratos session co