Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| backend.ai(PyPI) | 0 | N/A | N/A |
CVSS Metrics