Approved changes feed: RSS · Atom
cpe:2.3:a:hyperdxio:hyperdx:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hyperdxio (723ca2d5-2e7e-5e54-93c5-fcc5375cb4f9) |
|---|---|
| Product | Hyperdx (efd2af2f-800b-5f2d-a637-8ca74999d411) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/hyperdxio/hyperdx-deno |
purl2cpe | 2026-09-09 08:34:17.325813 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-63731 |
vulnerable | 2026-07-29 01:06:19.451015 |
HyperDX < 2.31.0 SSRF via ClickHouse Proxy Test Endpoint
HIGH (7.7)
HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to arbitrary internal destinations by supplying a caller-controlled host parameter to the ClickHouse proxy test endpoint with no URL validation or allowlist enforcement. Attackers can exploit the reflected error responses from the endpoint to disclose internal service response bodies, enabling access to internal APIs, container services, and cloud provider metadata endpoints.
Published: 2026-07-20T18:45:14.088Z
Updated: 2026-07-28T14:29:46.336Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-63730 |
vulnerable | 2026-07-29 01:06:19.450593 |
HyperDX < 2.31.0 SSRF via Webhook Test Endpoint
MEDIUM (5)
HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to make requests to arbitrary internal network destinations by supplying a caller-controlled URL to the webhook test endpoint. Attackers can bypass the insufficient hostname blacklist validation in the webhook handler to enumerate internal services, interact with internal containers, or access cloud instance metadata services including provider metadata endpoints.
Published: 2026-07-20T18:44:22.835Z
Updated: 2026-07-21T11:08:18.399Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.