Login Request a demo
JU
Product
juju
by Canonical · last CVE Oct 22, 2026
21
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 2High 5Medium 12Low 2
Severity
All severities21Critical2High5Medium12Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add juju to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32693
8.8
0%
Mar 18
Unauthorized access to Kubernetes secrets in Juju
Affected: 3.0.0 before 3.6.19
CVE-2025-0928
8.8
1%
Jul 8
Arbitrary executable upload via authenticated endpoint
Affected: 2.0.0 before 2.9.52; 3.0.0 before 3.6.8
CVE-2024-7558
8.0
1%
Oct 2
JUJU_CONTEXT_ID is a predictable authentication secret
Affected: before 2.9.51; 3.1.0 before 3.1.10; 3.2.0 before 3.2.4; 3.3.0 before 3.3.7; 3.4 before 3.4.6; 3.5.0 before 3.5.4
CVE-2015-1316
7.5
1%
Apr 22
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key
Affected: before 1.25.5
CVE-2026-93336
New
7.1
0%
Oct 22
Missing authorization in the unit resources download route in Juju controllers
Affected: 4.0 before 4.0.16
Showing 5