Repository navigation
Security: ConduitIO/conduit
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
API-supplied pipeline settings can exfiltrate engine environment secrets, reach internal networks (SSRF), and read or write arbitrary filesGHSA-m3mw-fpw8-w765 published
Oct 26, 2026 by devarismeroxaCritical -
Unauthenticated network-exposed API, cross-site request forgery and DNS rebinding in ConduitGHSA-v79j-j88p-m4ff published
Oct 26, 2026 by devarismeroxaCritical -
Schema registry client cache keyed on a 64-bit Rabin fingerprint lets a colliding schema silently take over another schema's identity within a subjectGHSA-95wx-33xh-gpvw published
Oct 22, 2026 by devarismeroxaModerate -
Standalone connector plugins inherit the engine's full environmentGHSA-gwvc-9h8p-x5r7 published
Oct 26, 2026 by devarismeroxaModerate
Learn more about advisories related to ConduitIO/conduit in the GitHub Advisory Database