CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

GHSA-VRCC-3CH7-HPPW vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

CVE-2026-100352 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

CVE-2026-100353 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

CVE-2026-100354 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

GHSA-RJ39-CV6W-8WV7 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

GHSA-G8CF-RCJF-C8CF vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-keycloak, gitness, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, grafana,...

CVE-2026-90534: Authorization Bypass Through User-Controlled Key

Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounted without any route-level permission check and invokes component loadMethods with an attacker-controlled nodeName, loadMethod, inputs, and...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gptscript, chisel, flux-notification-controller, crossplane-provider-aws-dynamodb, flux-kustomize-controller, step-issuer, fscrypt, mattermost, rancher-agent, falco-no-driver, external-dns, docker, k3s, gomplate, skaffold, external-secrets-operator, fulcio, ko,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-vpc-fips, crossplane-provider-aws-sesv2-fips, crossplane-provider-aws-ec2-fips, crossplane-provider-aws-opensearch, cluster-api-azure-controller, teleport-operator-fips, databricks-cli-fips, kueue-fips, crossplane-provider-aws-lambda-fips,...

com.squareup.misk:misk (>=2025.08.05.111709-c1791a4, <=2025.08.06.225110-5b65cb9), com.squareup.misk:misk-admin (>=2025.08.05.111709-c1791a4, <=2025.08.06.225110-5b65cb9) +27 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.3.6)

com.squareup.wire:wire-runtime MAVEN version 5.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =2025.08.05.111709-c1791a4, =2025.08.05.111709-c1791a4,...

com.amazonaws:aws-dynamodb-session-tomcat (2.0.4), org.apache.tomcat:tomcat-catalina-ha (8.0.1) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.1)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.amazonaws:aws-dynamodb-session-tomcat 2.0.4 - org.apache.tomcat:tomcat-catalina-ha 8.0.1 ...

EUVD-2023-38198

Malicious code in bioql PyPI...

com.squareup.misk:misk (>=0.25.0-20230526.1847-c1fcb3a, <=2023.09.14.092536-70da4ad), com.squareup.misk:misk-admin (>=0.25.0-20230526.1847-c1fcb3a, <=2023.09.14.092536-70da4ad) +27 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.6.2)

com.squareup.wire:wire-runtime MAVEN version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =0.25.0-20230526.1847-c1fcb3a, =0.25.0-20230526.1847-c1fcb3a,...

CVE-2023-34085

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request...