codefresh vulnerabilities

CVEs whose affected-version data names the codefresh package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-12878High· 8.8

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.

▾ Twilightoctopus · codefreshvia NVD

codefresh vulnerabilities (CVEs) · VulnSea