GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kots, sops, ingress-nginx-controller, prometheus-operator, bom, mc, net-kourier, litestream, x509-certificate-exporter, spicedb, rancher-helm, spiffe-helper, pulumi, crossplane-provider-aws-eks, gitlab-runner, dataplaneapi, cass-operator, pulumi-language-yaml,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kots, sops, ingress-nginx-controller, prometheus-operator, bom, mc, net-kourier, litestream, x509-certificate-exporter, spicedb, rancher-helm, spiffe-helper, pulumi, crossplane-provider-aws-eks, gitlab-runner, dataplaneapi, cass-operator, pulumi-language-yaml,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kots, sops, wave, rancher-helm, pulumi, nri-mongodb, cloudprober, otel-cli, mattermost, kubernetes-dashboard, pguser, node-problem-detector, nri-postgresql, cluster-api-aws-controller, nri-kubernetes, spegel, actions-runner-controller, kubernetes-event-exporter,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kots, sops, wave, rancher-helm, pulumi, nri-mongodb, cloudprober, otel-cli, mattermost, kubernetes-dashboard, pguser, node-problem-detector, nri-postgresql, cluster-api-aws-controller, nri-kubernetes, spegel, actions-runner-controller, kubernetes-event-exporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kots, sops, wave, rancher-helm, pulumi, nri-mongodb, cloudprober, otel-cli, mattermost, kubernetes-dashboard, pguser, node-problem-detector, nri-postgresql, cluster-api-aws-controller, nri-kubernetes, spegel, actions-runner-controller, kubernetes-event-exporter,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, kubelet-csr-approver, kyverno-policy-reporter-ui,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, terraform-provider-random, kyverno-policy-reporter-ui, crossplane-provider-aws-s3, apache-exporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, kubelet-csr-approver, kyverno-policy-reporter-ui,...

CVE-2025-13957

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default...

CVE-2025-13957

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default...

CVE-2025-13957

Summary: CVE-2025-13957 is a CWE-798 vulnerability involving hard-coded credentials that could lead to information disclosure and remote code execution when SOCKS Proxy is enabled, if administrator and PostgreSQL credentials are known. The issue is associated with Schneider Electric EcoStruxure I...

CVE-2025-13957

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default...

Prototype Pollution

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Prototype Pollution via triggers.js when a prototype property name is used as the function name. An attacker can terminate t...

Schneider Electric EcoStruxure IT Data Center Expert 信任管理问题漏洞

Schneider Electric EcoStruxure IT Data Center Expert is an extensible monitoring software developed by Schneider Electric, a French company. It is used to collect, organize, and distribute information about critical devices, providing a comprehensive view of the devices. Schneider Electric...

PT-2026-24188

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.13 Parse Server versions prior to 9.5.1-alpha.2 Description An unauthenticated attacker can cause a denial of service by crashing the Parse Server process. This occurs by calling a Cloud Function endpoint wit...

Fortinet FortiSOAR Agent Communication Bridge 路径遍历漏洞

The Fortinet FortiSOAR Agent Communication Bridge is an agent communication component of the automation platform developed by Fortinet, a US-based company. Versions 1.1.0 and all versions of 1.0 of the Fortinet FortiSOAR Agent Communication Bridge contain a path traversal vulnerability. This...

PT-2026-24204

Name of the Vulnerable Software and Affected Versions PostgreSQL affected versions not specified Description A security issue exists due to the use of hard-coded credentials. This could lead to information disclosure and remote code execution when the SOCKS Proxy is enabled, and administrator...

coral-server 安全漏洞

Coral-server is a Docker-based server operation and configuration management tool developed by CoralOS. Versions of coral-server prior to 1.1.0 contained security vulnerabilities. These vulnerabilities stemmed from insufficient validation of the connection proxy by SSE endpoints, which could allo...

CVE-2026-29023 Keygraph Shannon Hard-coded Router API Key

Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...

CVE-2026-29023 Keygraph Shannon Hard-coded Router API Key

Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using the publicly known static key. An attacker able to reach the router port can proxy requests through the Shannon instanc...