If you discover a security issue in Nexkey, please report it by this form.
This will allow us to assess the risk, and make a fix available before we add a bug report to the GitHub repository.
Thanks for helping make Nexkey safe for everyone.
This repository was archived by the owner on Dec 31, 2025. It is now read-only.
Security: nexryai/concorde
Security
SECURITY.md
-
Authentication tokens not being removed after logging outGHSA-2369-p2wh-7cc2 published
Feb 11, 2025 by nexryaiCritical -
CSRF vulnerability due to insecure configuration of authentication cookie attributesGHSA-5hgq-9vw8-7v87 published
Feb 11, 2025 by nexryaiHigh -
Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxyGHSA-3pfm-hp96-pfgv published
Dec 19, 2024 by nexryaiHigh -
External apps using tokens issued by administrators and moderators can call admin APIsGHSA-pjj7-7hcj-9cpc published
Dec 26, 2023 by nexryaiCritical -
missing signature validation allows arbitrary users to impersonate any remote userGHSA-fpxw-rw9v-2gmx published
Nov 29, 2023 by nexryaiHigh -
Bypass authentication of Bull dashboardGHSA-g8w5-568f-ffwf published
Sep 30, 2023 by nexryaiHigh
Learn more about advisories related to nexryai/concorde in the GitHub Advisory Database