cf_deployment vulnerabilities

CVEs whose affected-version data names the cf_deployment package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59385Low· 2.7

1w ago

Space Developer can extract space-scoped broker credentials

A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials, enabling extraction of existing broker credentials by redirecting them to a broker under their control. The CF API does…

▾ SunlitCloud Foundry · CAPI (Cloud Foundry Controller)EPSS 0.18%via CVEORG