[00:02:21] PHP already available at /tmp/coolify-vuln-variant/php (8.5.4)
[00:02:21] Composer already available
[00:02:22] Vulnerable target v4.0.0-beta.470: 575b0766d12bad2a78febff72ab59c017772bcf7
[00:02:22] Fixed target v4.0.0-beta.471: 914d7e0b50505bc1fd56c34974fca09ad354e92a
[00:02:22] Preparing vulnerable runtime database
[00:02:22] Copying cached Composer vendor into v4.0.0-beta.470
   INFO  Running migrations.  

  2025_11_17_145255_add_comment_to_environment_variables_table .. 40.08ms DONE
  2025_12_25_072315_add_cmd_healthcheck_to_applications_table ... 41.71ms DONE
  2026_02_26_163035_add_stripe_refunded_at_to_subscriptions_table  23.50ms DONE
  2026_02_27_000000_add_public_port_timeout_to_databases ....... 175.76ms DONE
  2026_03_11_000000_add_server_metadata_to_servers_table ........ 20.81ms DONE
  2026_03_16_000000_add_is_preview_suffix_enabled_to_volume_tables  38.86ms DONE
  2026_03_23_101720_add_uuid_to_local_persistent_volumes_table . 153.95ms DONE

[00:02:34] Running vulnerable Member API-token/private-key probe
[vulnerable] ROLE=member
[vulnerable] TEAM_ID=3
[vulnerable] TOKEN_ABILITIES=["read","write"]
[vulnerable] TOKEN_CAN_READ_SENSITIVE=false
[vulnerable] API_KEYS_RESPONSE=[{"created_at":"2026-07-08T00:02:35.000000Z","description":"Variant sensitive key marker","fingerprint":"WDF1BErfxg5i08eN33HIy+rf0GMWLQR8QRx0yiAaFbc","id":1,"is_git_related":0,"name":"Variant Secret Key","public_key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFuGmoeGq/pojrsyP1pszcNVuZx9iFkCELtxrh31QJ68 ","team_id":3,"updated_at":"2026-07-08T00:02:35.000000Z","uuid":"vhblmfe4pl76ee1yjob5mpak"}]
[vulnerable] LEAKED_PRIVATE_KEY_MARKER=false
[vulnerable] PLAIN_TOKEN_PREFIX=1|<redacted>
[00:02:35] Preparing fixed runtime database
[00:02:35] Copying cached Composer vendor into v4.0.0-beta.471
  2025_12_24_133707_add_predefined_server_variables_to_existing_servers  4.61ms DONE
  2025_12_25_072315_add_cmd_healthcheck_to_applications_table ... 39.98ms DONE
  2026_02_26_163035_add_stripe_refunded_at_to_subscriptions_table  17.89ms DONE
  2026_02_27_000000_add_public_port_timeout_to_databases ....... 180.85ms DONE
  2026_03_11_000000_add_server_metadata_to_servers_table ........ 20.73ms DONE
  2026_03_16_000000_add_is_preview_suffix_enabled_to_volume_tables  42.96ms DONE
  2026_03_23_101720_add_uuid_to_local_persistent_volumes_table . 159.73ms DONE
  2026_03_29_000000_encrypt_existing_clickhouse_admin_passwords .. 0.39ms DONE
  2026_03_30_120000_add_docker_registry_image_tag_to_application_previews_and_deployment_queues  38.79ms DONE

[00:02:46] Running fixed Member API-token/private-key probe
[fixed] ROLE=member
[fixed] TEAM_ID=3
[fixed] TOKEN_ABILITIES=["read","write"]
[fixed] TOKEN_CAN_READ_SENSITIVE=false
[fixed] API_KEYS_RESPONSE=[{"created_at":"2026-07-08T00:02:47.000000Z","description":"Variant sensitive key marker","fingerprint":"WDF1BErfxg5i08eN33HIy+rf0GMWLQR8QRx0yiAaFbc","id":1,"is_git_related":0,"name":"Variant Secret Key","public_key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFuGmoeGq/pojrsyP1pszcNVuZx9iFkCELtxrh31QJ68 ","team_id":3,"updated_at":"2026-07-08T00:02:47.000000Z","uuid":"e13b5i115kfvtwdpj5uwh5qa"}]
[fixed] LEAKED_PRIVATE_KEY_MARKER=false
[fixed] PLAIN_TOKEN_PREFIX=1|<redacted>
[00:02:47] Summary: vulnerable_leak=false fixed_leak=false vulnerable_sensitive=false fixed_sensitive=false
[00:02:47] NO BYPASS: Member token path ran on both targets but did not expose private-key material on the fixed target