1264 matches found
CVE-2026-50162 vulnerabilities
Vulnerabilities for packages: conftest, gogatekeeper, helm-mapkubeapis, rancher-helm, ocm-cli-fips, conftest-fips, drone-fips, kyverno-notation-aws, crossplane-fips, chaos-mesh, helm-operator-fips, drone, helm, xeol, kubescape, oras-fips, headlamp-fips, gitness, helm-push, kgateway-fips,...
CVE-2026-48978 vulnerabilities
Vulnerabilities for packages: conftest, gogatekeeper, helm-mapkubeapis, rancher-helm, ocm-cli-fips, conftest-fips, harvester-fips, drone-fips, kyverno-notation-aws, crossplane-fips, chaos-mesh, helm-operator-fips, drone, helm, xeol, kubescape, oras-fips, headlamp-fips, gitness, helm-push,...
GHSA-VH4V-2XQ2-G5CG vulnerabilities
Vulnerabilities for packages: conftest, gogatekeeper, helm-mapkubeapis, rancher-helm, ocm-cli-fips, conftest-fips, drone-fips, kyverno-notation-aws, crossplane-fips, chaos-mesh, helm-operator-fips, drone, helm, xeol, kubescape, oras-fips, headlamp-fips, gitness, helm-push, kgateway-fips,...
GHSA-XF85-363P-868W vulnerabilities
Vulnerabilities for packages: conftest, gogatekeeper, helm-mapkubeapis, rancher-helm, ocm-cli-fips, conftest-fips, harvester-fips, drone-fips, kyverno-notation-aws, crossplane-fips, chaos-mesh, helm-operator-fips, drone, helm, xeol, kubescape, oras-fips, headlamp-fips, gitness, helm-push,...
CVE-2026-50151 vulnerabilities
Vulnerabilities for packages: conftest, gogatekeeper, helm-mapkubeapis, rancher-helm, ocm-cli-fips, conftest-fips, drone-fips, kyverno-notation-aws, crossplane-fips, chaos-mesh, helm-operator-fips, drone, helm, xeol, kubescape, oras-fips, headlamp-fips, gitness, helm-push, kgateway-fips,...
GHSA-JXPM-75MH-9FP7 vulnerabilities
Vulnerabilities for packages: conftest, gogatekeeper, helm-mapkubeapis, rancher-helm, ocm-cli-fips, conftest-fips, drone-fips, kyverno-notation-aws, crossplane-fips, chaos-mesh, helm-operator-fips, drone, helm, xeol, kubescape, oras-fips, headlamp-fips, gitness, helm-push, kgateway-fips,...
CVE-2026-50151 vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, k9s, teleport, trivy, rancher, chartmuseum, vcluster, cilium-cli, helm-set-status, oras, helm-push, opentofu, kube-arangodb, argo-cd, conftest, tw, kyverno-notation-aws, argocd-image-updater, cluster-api-helm-controller, falcoctl, gitness, maru...
GHSA-8XWF-RJM4-XVHV vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, k9s, teleport, trivy, rancher, chartmuseum, vcluster, cilium-cli, helm-set-status, oras, helm-push, kube-arangodb, argo-cd, conftest, tw, kyverno-notation-aws, argocd-image-updater, cluster-api-helm-controller, falcoctl, gitness, maru,...
CVE-2026-50162 vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, k9s, teleport, trivy, rancher, chartmuseum, vcluster, cilium-cli, helm-set-status, oras, helm-push, kube-arangodb, argo-cd, conftest, tw, kyverno-notation-aws, argocd-image-updater, cluster-api-helm-controller, falcoctl, gitness, maru,...
GHSA-VH4V-2XQ2-G5CG vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, k9s, teleport, trivy, rancher, chartmuseum, vcluster, cilium-cli, helm-set-status, oras, helm-push, opentofu, kube-arangodb, argo-cd, conftest, tw, kyverno-notation-aws, argocd-image-updater, cluster-api-helm-controller, falcoctl, gitness, maru...
GHSA-JXPM-75MH-9FP7 vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, k9s, teleport, trivy, rancher, chartmuseum, vcluster, cilium-cli, helm-set-status, oras, helm-push, opentofu, kube-arangodb, argo-cd, conftest, tw, kyverno-notation-aws, argocd-image-updater, cluster-api-helm-controller, falcoctl, gitness, maru...
CVE-2026-48978 vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, k9s, teleport, trivy, rancher, chartmuseum, vcluster, cilium-cli, helm-set-status, oras, helm-push, opentofu, kube-arangodb, argo-cd, conftest, tw, kyverno-notation-aws, argocd-image-updater, cluster-api-helm-controller, falcoctl, gitness, maru...
GHSA-XF85-363P-868W vulnerabilities
Vulnerabilities for packages: tigera-operator, kots, k9s, teleport, trivy, rancher, chartmuseum, vcluster, cilium-cli, helm-set-status, oras, helm-push, opentofu, kube-arangodb, argo-cd, conftest, tw, kyverno-notation-aws, argocd-image-updater, cluster-api-helm-controller, falcoctl, gitness, maru...
Out-of-bounds Write in OpenCV
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...
PT-2026-54936
Name of the Vulnerable Software and Affected Versions Eclipse Parsson versions prior to 1.1.8 Description The JSON parser does not enforce a default maximum on the number of characters consumed when parsing a single JSON document. This allows an attacker to provide specially crafted JSON document...
qs: qs: Denial of Service via improper input validation in array parsing
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation e.g., a=value. This bypasses the arrayLimit option, which is designed to limit the size of...
CVE-2026-53426 Atom-table exhaustion denial-of-service via JSON parse_document in MDEx
Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parsedocument/2 accepts a :json, json source. In lib/mdex.ex, the private jsontonode/1 function passes the attacker-controlled nodetype value to Module.concat/1, which calls...
PYSEC-2026-319 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
Summary The safeevalexpression function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes giframe, fback, fbuiltins do NOT start with underscore, enabling a complete sandbox escape to achieve...
Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
ImpactWhen verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs LDP-VCs, the result of verifying the presentation document.proof was not factored into the final verified value true/false on the presentation record. Below is an example result from verifying a JSON-LD...