00Gxd14G

**Name of the Vulnerable Software and Affected Versions** Coolify versions prior to 4.0.0-beta.474 **Description** An issue exists in the file upload endpoint `app/Http/Controllers/UploadController.php` used for database backup restore uploads. The system fails to enforce file type or size validation, which allows an authenticated user to upload oversized or unexpected files, potentially impacting service availability. **Recommendations** Update to version 4.0.0-beta.474.

**Name of the Vulnerable Software and Affected Versions** Coolify versions prior to 4.0.0-beta.474 **Description** The application lacks authentication, rate limiting, and input validation at the 'POST /api/feedback' endpoint. This allows arbitrary content to be forwarded directly to a Discord webhook, which can lead to spam, content injection, and webhook abuse. **Recommendations** Update to version 4.0.0-beta.474.