GHSA-h2p8-37qr-qfr9

GHSA-h2p8-37qr-qfr9 PUBLISHED CVSS 5.900000095367432 MEDIUM

Record from GitHub Advisory Database · Published August 20, 2025

A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment.

Risk scores

CVSS 3.1

5.900000095367432

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Timeline

Aug 20, 2025 CVE Published
Apr 10, 2026 Distribution Patch
Apr 10, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-h2p8-37qr-qfr9
vulnetix vdb fixes GHSA-h2p8-37qr-qfr9

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-h2p8-37qr-qfr9/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →