Vulnerabilities in azukaar

4 results

CVE-2023-49091HIGHJwttoken in Cosmos server never expires after password changed and logging outEPSS 0.8%CVE-2025-23214MEDIUMCosmos userbase checking vulnerabilityEPSS 0.7%CVE-2026-49447MEDIUMCosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokensEPSS 0.4%CVE-2026-49446MEDIUMCosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-ServerEPSS 0.3%