This page aggregates publicly disclosed CVE and security risk information related to rhodecode, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2015-1613 | RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method. | [email protected] | 4.0 | 0.95% | 2015-02-16 | 2026-06-16 |
| CVE-2015-0260 | RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method. | [email protected] | 4.0 | 1.21% | 2015-02-16 | 2026-06-16 |