1.41.0

DATE	CVE	VULNERABILITY TITLE	RISK
2018-03-19	CVE-2018-1195	Insufficient Session Expiration vulnerability in Cloudfoundry Cf-Release In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. network low complexity cloudfoundry CWE-613	6.5
2017-11-28	CVE-2017-14389	Unspecified vulnerability in Cloudfoundry Capi-Release An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to v1.0.0). network low complexity cloudfoundry	4.0