Threats affecting pkg:github/tale/headplane

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.4%	CVE-2026-46484tale headplane · Path Traversal High8.1EPSS 0.4%2026-06-08CVE Database V5CVE-2026-46484 Headplane versions prior to 0.6.3 and 0.7.0-beta.3 contain a path traversal vulnerability in the Headscale API client used for node and user rename operations. This vulnerability allows improper limitation of pathnames, leading to authorization bypass. The issue has been patched in versions 0.6.3 and 0.7.0-beta.3. EPSS 0.4%Vulnerability CWE-22	CVE Database V5	2026-06-08

Page 1 of 1