13365 matches found
PYSEC-2026-2669 Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
Server-Side Request Forgery SSRF in Azure MCP Server allows an authorized attacker to elevate privileges over a network...
PYSEC-2026-2968 Azure PromptFlow remote code execution related to Jinja templates
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...
CLEANSTART-2026-EY91394 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-CV84139 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-61448 Parse Server 9.0.0 Stored XSS via malformed Content-Type
Parse Server is affected by a stored cross-site scripting XSS vulnerability in versions = 9.0.0, 9.10.0-alpha.2 and = 8.6.83. When an uploaded file's extension is not recognized by the mime package, Parse Server preserves the client-supplied Content-Type. A malformed Content-Type that is not a...
PT-2026-57441
Name of the Vulnerable Software and Affected Versions Parse Server versions 9.0.0 through 9.10.0-alpha.1 Parse Server versions 8.x through 8.6.83 Description A stored cross-site scripting XSS issue exists when the software fails to recognize an uploaded file's extension via the mime package,...
GHSA-XCGV-8MV7-V8C7 vulnerabilities
Vulnerabilities for packages: zarf-fips, gitlab-workhorse-ce-fips, cloud-provider-azure-fips, libnvidia-container, cloud-provider-azure, karpenter, grype-fips, authentik-fips, jaeger-fips, docker-cli-fips, kubeflow-katib, dataplaneapi-fips, pulumi, caddy-fips, pulumi-language-yaml, rke2-runtime,...
CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API
A flaw was found in Prometheus, an open-source monitoring system. The clientsecret field within the Azure Active Directory AD remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access t...
CVE-2026-53202 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...
GHSA-WFX4-V2WF-4GMP vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...
GHSA-GVRM-XH5G-W8V6 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...
GHSA-HFRJ-R4V7-3997 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...
GHSA-MP79-8QQ6-QP9G vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...
CVE-2026-53228 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...
CVE-2026-53229 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...
CVE-2026-53212 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-aws, linux-gcp, linux-qemu...