This might be proprietary software.
|2019-03-26||CVE-2019-3804||It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.||Cockpit, Fedora, Virtualization||7.5|
|2020-12-30||CVE-2020-35850||** DISPUTED ** An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue."||Cockpit||6.5|