zane-ops vulnerabilities

CVEs whose affected-version data names the zane-ops package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121734Medium· 6.5PoC

5d ago

ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIView

ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping…

▾ Twilightzane-ops · zane-opsEPSS 0.28%via CVEORG