All vulnerabilities

Servers and applications

CVE-2025-49593

HTTP Headers May Leak to Malicious Container Registries

Severity
Medium 6.8
Published
17 Jun 2025
Last changed
17 Jun 2025
Added to UpHeron
3 Nov 2026
Fixed in
2.27.7
Also known as
GHSA-h5jw-8c32-xfv6
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
PortainerServers and applications · github:portainer/portainer
  • Every version before 2.27.7

References