GHSA-R529-G827-7GF5 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

GHSA-9RPM-78H2-FVW5 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

CVE-2026-31613 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

CVE-2026-43108 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

CVE-2026-43107 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

CVE-2026-31579 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

CVE-2026-43500 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu-rc, linux-azure, linux-qemu-melange, linux-aws, linux-gcp, linux-qemu...

CVE-2026-43103 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

CVE-2026-43102 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

CVE-2026-43101 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

GHSA-6447-4W47-GH9G vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-azure, linux-aws, linux-gcp, linux-qemu...

Low: aws-cfn-bootstrap

Issue Overview: No CVE associated with this advisory Affected Packages: aws-cfn-bootstrap Issue Correction: Run dnf update aws-cfn-bootstrap --releasever 2023.11.20260514 or dnf update --advisory ALAS2023-2026-1662 --releasever 2023.11.20260514 to update your system. More information on how to...

EUVD-2026-30302

Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support @NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping did n...

CVE-2026-44308

Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support @NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping did n...

CVE-2026-44308 Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications

Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support @NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping did n...

CVE-2026-44308 Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications

Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support @NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping did n...

CVE-2026-44308 Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications

Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support @NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping did n...

CVE-2026-44308

CVE-2026-44308 concerns Spring Cloud AWS, where the SNS HTTP/HTTPS endpoint support methods (@NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping) failed to verify incoming SNS message signatures from versions 3.0.0 through 4.0.1. An unauthent...

Malicious Package

Overview knot-date-utils-rb is a malicious package. This package is part of a malicious cluster of Ruby gems published by the threat actor knot-theory. Designed to impersonate legitimate utilities, it executes a payload upon installation that harvests environment variables, SSH keys, AWS...

Malicious Package

Overview knot-devise-jwt-helper is a malicious package. This package is part of a malicious cluster of Ruby gems published by the threat actor knot-theory. Designed to impersonate legitimate utilities, it executes a payload upon installation that harvests environment variables, SSH keys, AWS...