Dispatch vulnerabilities

2 known vulnerabilities in Dispatch from Netflix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Dispatch: Improper Control of Generation of Code

  CVE-2024-7093Aug 1, 2024Netflix

  Dispatch's notification service uses Jinja templates to generate messages to users. Jinja permits code execution within blocks, which were neither properly sanitized nor sandboxed. This vulnerability enables users to construct command line scripts in their cus

• 7.5 High severity

  dispatch: Generation of Error Message Containing Sensitive Information

  CVE-2023-40171Aug 17, 2023Netflix

  Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the `Dispatch Plugin - Basic Authentication Provider` plugin encounters an error when attempting to