5216 matches found
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: malcontent, victoriametrics-cluster-fips, karpenter-fips, smarter-device-manager, oras-fips, victorialogs-fips, omni-fips, cilium-certgen-fips, grafana-operator-fips, polaris, sftpgo-plugin-eventsearch, k8s-metacollector-fips, kubernetes-dashboard-web-fips,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: malcontent, trivy, zitadel, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, scorecard, omni-fips, amazon-ssm-agent-fips, gitlab-operator-fips, slsa-verifier, gitness, helm-fips, envconsul-fips, helm-exporter-fips, knative-eventing-fips, etcd,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: malcontent, trivy, zitadel, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, scorecard, omni-fips, amazon-ssm-agent-fips, gitlab-operator-fips, slsa-verifier, gitness, helm-fips, envconsul-fips, helm-exporter-fips, knative-eventing-fips, etcd,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: malcontent, victoriametrics-cluster-fips, yunikorn-k8shim-fips, trivy, wgcf, kafkaexporter, spicedb-operator, zitadel, longhorn-cli, aws-application-networking-k8s, emqx-exporter-fips, cloud-provider-azure-fips, cloud-provider-azure, cue-fips, gitlab-operator,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: yunikorn-k8shim-fips, trivy, wgcf, cloud-provider-azure, kubernetes-release-fips, gitlab-operator-fips, gostatsd, slsa-verifier, gitness, k8ssandra-operator, cloud-sql-proxy-fips, knative-eventing-fips, crossplane-provider-keycloak, q, ctop, cilium-envoy-fips,...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058
aws-mcp-server is vulnerable to a remote command-injection (CVE-2026-5058) caused by insufficient validation of a user-supplied string before using it in a system call. This allows arbitrary code execution in the MCP server context. The CVSS v3 base score is 9.8 (CRITICAL) with network access, no...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
Vulnerability Disclosure: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Summary The Axios library is vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound...
GHSA-RX25-RPPP-X99W vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-vmware, linux-azure, linux-gcp...
GHSA-RWC9-H9MH-XFWQ vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-vmware, linux-azure, linux-gcp...
GHSA-R8HG-WQ4J-QXMG vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-vmware, linux-azure, linux-gcp...
GHSA-P5VH-P63C-CG4V vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu, linux-vmware, linux-azure, linux-gcp...