phasehq vulnerabilities

Products

• phasehq/console 1

Latest phasehq CVEs

Newest publication first

1. CVE-2026-110210 Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL Query

   Published 2026-10-13

   Medium·CVSS 6.0 EPSS 0.50%

   Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known secret identifier to re...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.