Treeverse vulnerabilities
We track 2 vulnerabilities in Treeverse products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Treeverse vulnerabilities
- 8.7 High severity
lakeFS: Improper Neutralization of Input During Web Page Generation
lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects without sanitizing
- 8.1 High severity
lakeFS: Improper Limitation of a Pathname to a Restricted Directory
lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to 1.77.0, the local block adapter (pkg/block/local/adapter.go) allows authenticated users to read and write files outside their designated storage boundaries. The