Approved changes feed: RSS · Atom
cpe:2.3:a:goteleport:teleport:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Goteleport (823d37de-837f-5c15-b796-680084d257fd) |
|---|---|
| Product | Teleport (1fca214b-5d96-5838-a583-6ac6c74a852b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gravitational/teleport |
purl2cpe | 2026-06-01 10:14:20.293258 |
pkg:rpm/opensuse/teleport |
purl2cpe | 2026-06-01 10:14:20.293261 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-36633 |
vulnerable | 2026-06-08 05:46:07.625029 |
Details available
Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload.
Published: 2022-08-24T12:29:54.000Z
Updated: 2024-08-03T10:07:34.522Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41395 |
vulnerable | 2026-06-08 05:35:20.495714 |
Details available
Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.
Published: 2021-09-18T15:15:01.000Z
Updated: 2024-08-04T03:08:32.452Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41394 |
vulnerable | 2026-06-08 05:35:20.495271 |
Details available
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.
Published: 2021-09-18T15:14:43.000Z
Updated: 2024-08-04T03:08:32.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41393 |
vulnerable | 2026-06-08 05:35:20.494766 |
Details available
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.
Published: 2021-09-18T15:15:14.000Z
Updated: 2024-08-04T03:08:32.430Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.