Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
>= 1.13.0	✅
>= 1.13.0-extra	✅
< 1.13.0	❌
< 1.13.0-extra	❌

Reporting a Vulnerability

Please report vulnerability via GitHub or email at security@judge0.com.

Your reports will be reviewed ASAP, and an update will also be released ASAP.

SSRF into Sandbox Escape through Unsafe Default Configuration
GHSA-q7vg-26pg-v5hr published Apr 18, 2024 by hermanzdosilovic

Critical
Sandbox Escape Patch Bypass via chown running on Symbolic Link
GHSA-3xpw-36v7-2cmg published Apr 18, 2024 by hermanzdosilovic

Critical
Sandbox Escape via Symbolic Link
GHSA-h9g2-45c8-89cf published Apr 18, 2024 by hermanzdosilovic

Critical

Learn more about advisories related to judge0/judge0 in the GitHub Advisory Database