Api Gateway Deploy
Approved changes feed: RSS · Atom
cpe:2.3:a:bleon-ethical:api-gateway-deploy:1.0.0:*:*:*:*:*:*:*part: a version: 1.0.0 update: *
| Vendor | Bleon Ethical (9a865b40-7c92-5b36-b701-ebae37f5d41a) |
|---|---|
| Product | Api Gateway Deploy (30846d96-d381-56db-9771-4c75c8d4a578) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27208 |
vulnerable | 2026-06-08 07:53:22.031737 |
api-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution
CRITICAL (9.2)
bleon-ethical/api-gateway-deploy provides API gateway deployment. Version 1.0.0 is vulnerable to an attack chain involving OS Command Injection and Privilege Escalation. This allows an attacker to execute arbitrary commands with root privileges within the container, potentially leading to a container escape and unauthorized infrastructure modifications. This is fixed in version 1.0.1 by implementing strict input sanitization and secure delimiters in entrypoint.sh, enforcing a non-root user (appuser) in the Dockerfile, and establishing mandatory security quality gates.
Published: 2026-02-24T13:52:43.155Z
Updated: 2026-02-27T20:50:16.436Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.