10516 matches found
CVE-2025-27771
In UpTrain versions 0.7.1 and earlier, the /add_prompts endpoint accepts untrusted checks and metadata parameters that are deserialized and evaluated without sanitization, enabling arbitrary Python code execution. An authenticated user can achieve full host compromise (typically the Docker contai...
Important: docker
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...
PT-2026-76687
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /new run endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able...
Important: docker
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FA...
Important: docker
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Issue Correction: Run dnf update docker --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2062 --releasever 2023.12.20260817 to...
Exploit for CVE-2026-73519
CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthen...
Exploit for CVE-2026-20896
CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Exploit Development Lab Overview This pr...
GO-2023-1897 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2023-1850 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2023-1849 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2023-1986 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2024-3304 vulnerabilities
Vulnerabilities for packages: rancher-machine, pulumi, kubevela, docker-machine-driver-harvester...
GO-2026-5538 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GO-2020-0017 vulnerabilities
Vulnerabilities for packages: dgraph, docker-credential-acr-env, docker-credential-acr-env-fips, gitness...
GO-2024-2914 vulnerabilities
Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...
GO-2025-4109 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...