gradient vulnerabilities
1 known vulnerability in gradient from Wavelens. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score
Latest first
- 9.4 Critical severity
gradient: Missing Authentication for Critical Functionality
Gradient is a nix-based continuous integration system. In 1.1.0, when GRADIENT_DISCOVERABLE=true (the default, and the NixOS module default), anyone who can reach /proto can register as a worker without any credentials by sending a fresh, never-registered work