Approved changes feed: RSS · Atom

cpe:2.3:a:juju:juju:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJuju (b2c97d5e-5824-57a8-a115-c78d0dccd644)
ProductJuju (3c78ed12-bf24-5c9e-828a-5db1ac5b7f41)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-68153 vulnerable 2026-06-08 07:41:20.891272 Juju: Resource poisoning
Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, any authenticated user, machine or controller under a Juju controller can modify the resources of an application within the entire controller. This issue has been patched in versions 2.9.56 and 3.6.19.
Published: 2026-04-03T15:28:06.191Z
Updated: 2026-04-04T03:16:56.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68152 vulnerable 2026-06-08 07:41:20.889934 Juju: Read All Controller Logs From Compromised Workload
Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, it is possible that a compromised workload machine under a Juju controller can read any log file for any entity in any model at any level. This issue has been patched in versions 2.9.56 and 3.6.19.
Published: 2026-04-03T15:25:56.142Z
Updated: 2026-04-03T20:03:45.979Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.