com.google.appengine:appengine-java-sdk (>=5.0.0, <=5.2.0-beta), com.google.appengine:jetty121-assembly (>=3.0.0-beta, <=5.2.0-beta) +3 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-ethereum (>=12.1.0.alpha0, <=12.1.12)

org.eclipse.jetty:jetty-ethereum MAVEN version =12.1.0.alpha0, =5.0.0, =3.0.0-beta, =12.1.0.alpha0, =12.1.0.alpha0, =0.3.1, =0.4.0 Source cves: CVE-2026-19863 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-21243549...

com.google.appengine:appengine-java-sdk (>=5.0.0, <=5.2.0-beta), com.google.appengine:jetty121-assembly (>=3.0.0-beta, <=5.2.0-beta) +3 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-ethereum (>=12.1.0, <=12.1.12)

org.eclipse.jetty:jetty-ethereum MAVEN version =12.1.0, =5.0.0, =3.0.0-beta, =12.1.0, =12.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-19863 Source advisory: MEND:CVE-2026-19863...

AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx devices

Multiple internal virtual filesystem paths are unintentionally accessible remotely in the SICK ICR890-4 and SICK InspectorP6xx devices. If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the device...

CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-11841

CVE-2026-11841 describes unauthenticated read/write access to sensitive filesystem areas via AppEngine Fileaccess over HTTP due to improper access controls. The vulnerability exposes a critical filesystem directory, enabling reading and modification of application settings (including customer pas...

EUVD-2026-49732

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-11841 CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-11841: Files or Directories Accessible to External Parties

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

PT-2026-65430

Name of the Vulnerable Software and Affected Versions AppEngine affected versions not specified Description Improper access restrictions in the AppEngine Fileaccess over HTTP feature allow unauthenticated users to perform read and write operations on sensitive filesystem areas. This exposure...

com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: OSV:GHSA-2FVJ-HGJ9-J2GR...

Malicious code in google-appengine-ext (PyPI)

Source: kam193 142a8fbc789954291f2b01aab5ac1d139eaaf4f9f490fd6dcf30da438f7d8e51 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

SUSE-RU-2026:2816-1 Recommended update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build, python-google-cloud-compute, python-google-cloud-core, python-google-cloud-dns, python-google-cloud-domains, python-google-cloud-iam, python-google-cloud-kms, python-google-cloud-kms-inventory, python-google-cloud-logging, python-google-cloud-run, python-google-cloud-secret-manager, python-google-cloud-service-directory, python-google-cloud-spanner, python-google-cloud-storage, python-google-cloud-vpc-access, python-google-crc32c, python-google-resumable-media, python-googleapis-common-protos, python-grpc-google-iam-v1, python-grpc-interceptor, python-mmh3, python-mypy, python-opentelemetry-resourcedetector-gcp, python-poetry-core, python-proto-plus, python-pytest-asyncio, python-syrupy, python-typed-ast, python-uritemplate, python-dnspython, python-trio, python-websocket-client

This update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build,...

com.devsoap.plugin.vaadin.groovy:com.devsoap.plugin.vaadin.groovy.gradle.plugin (>=1.2.0.alpha1, <=1.2.0.alpha2), com.devsoap.plugin.vaadin:com.devsoap.plugin.vaadin.gradle.plugin (>=1.2.0.alpha1, <=2.0.0.beta2) +79 more potentially affected by CVE-2026-5795 via org.eclipse.jetty:jetty-jaspi (>=9.4.0.v20161208, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-jaspi MAVEN version =9.4.0.v20161208, =1.2.0.alpha1, =1.2.0.alpha1, =1.2.0.alpha1, =1.8.2, =2.0.20, =7.2.16, =0.1.1, =4.3.0, =7.2.0, =7.1.0, =7.1.0, =7.1.0, =7.1.0, =6.11.0, =6.11.4 and more Source cves: CVE-2026-5795 Source advisory: OSV:GHSA-R7P8-XQ5M-436C...

CVE-2026-2331

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

EUVD-2026-10025

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-2331

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-2331

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-2331

CVE-2026-2331 describes unauthenticated read/write access to sensitive filesystem areas via AppEngine Fileaccess over HTTP caused by improper access restrictions. A critical filesystem directory was exposed through the HTTP-based file access feature, allowing access without authentication. Impact...

CVE-2026-2331 CVE-2026-2331

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...