
Vulnerabilities
Kanban Unauthenticated SSRF Flaw in v0.6.0 Exposes Cloud Metadata Due to Incomplete CVE Fix
An unauthenticated server-side request forgery flaw in Kanban versions up to 0.6.0 allows attackers to access internal services and cloud metadata when S3_ENDPOINT is unset.
