381 matches found
CLEANSTART-2026-IZ22023 Security fixes in flux-image-automation-controller 1.2.1-r1
Package flux-image-automation-controller version 1.2.1-r1 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CVE-2026-73308 Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders
Budibase is an open-source low-code platform. Prior to 3.39.25, packages/server/src/api/controllers/automation.ts returned automation test results containing trigger.outputs.user.oauth2, broadcast BuilderSocketEvent.AutomationTestProgress to the app room, and stored progress in...
RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update (Important) (RHSA-2026:42079)
The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:42079 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, gitlab-workhorse-ce, helm, kubevela-fips, kubernetes-fips, backup-restore-operator, osv-scanner, mattermost, gatekeeper-fips, flux-image-automation-controller-fips, prometheus-elasticsearch-exporter, terraform, mattermost-fips,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, longhorn-cli-fips, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-firehose, crossplane-provider-azure-resources, kubernetes-fips, docker-compose-fips, crossplane-provider-aws-efs-fips, openbao,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: scorecard, melange, nuclei, fscrypt, gitea, gh, grype, step-issuer, ksops, gptscript, telegraf, steampipe, argocd-image-updater, ko, chezmoi, aactl, zarf, nfpm, guac, go-discover, rootlesskit, cluster-api-azure-controller, buildah, trivy-operator, osv-scanner, ranche...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, promxy, ratify-fips, flux-helm-controller, grafana-agent-operator, crossplane-provider-aws-firehose, cluster-api-gcp-controller-fips, terraform-provider-databricks, crossplane-provider-azure-resources, kubernetes-fips,...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-servicenetworking, promxy, ratify-fips, flux-helm-controller, grafana-agent-operator, crossplane-provider-aws-firehose, cluster-api-gcp-controller-fips, terraform-provider-databricks, crossplane-provider-azure-resources, kubernetes-fips,...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: nfpm, kubevela, guac, argocd-image-updater, goreleaser, kubevela-fips, argo-events, src-fingerprint-fips, osv-scanner, witness, syft-fips, redpanda-console, flux-image-automation-controller-fips, pulumi-kubernetes-operator, google-osconfig-agent, kyverno, k9s,...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Delta Electronics AS320T Denial of Service Vulnerability
Delta Electronics AS320T is a high-performance programmable logic controller device for industrial automation control from Delta Electronics China. A denial of service vulnerability exists in the Delta Electronics AS320T, which can be exploited by an attacker to cause a denial of service...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: aws-load-balancer-controller, envoy-ratelimit, go, dbmate, mountpoint-s3-csi-driver, karpenter, fluxcd-kustomize-mutating-webhook, local-path-provisioner, grafana-operator, malcontent, spire-server, flux-image-reflector-controller, gh, clickhouse-operator,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: mkcert, filebrowser, fscrypt, aws-sigv4-proxy, grpcurl, rancher-system-upgrade-controller, bento, step-issuer, descheduler, mcp-grafana, conjur-cli, kubernetes-dashboard-api, trivy-operator, vault-secrets-webhook, dockerize, terraform-provider-pagerduty, hugo-extende...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Tinycontrol LAN Controller 安全漏洞
Tinycontrol LAN Controller is a building automation controller from Tinycontrol Poland. A security vulnerability exists in Tinycontrol LAN Controller version 1.58a, which stems from an authentication bypass that could lead to modification of administrator credentials...
Tinycontrol LAN Controller 安全漏洞
Tinycontrol LAN Controller is a building automation controller from Tinycontrol Poland. A security vulnerability exists in Tinycontrol LAN Controller v3 LK3 version 1.58a, which originates from unauthorized access and could lead to credential disclosure...
