16205 matches found
azure-cli (>=2.0.58, <=2.0.66), azure-cli-appservice (>=0.2.13, <=0.2.20) +27 more potentially affected by CVE-2026-26007 via cryptography (2.4.2)
cryptography PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - azure-cli =2.0.58, =0.2.13, =1.5.5, =1.0.0b6, =18.4.0, =0.3.0rc1, =1.0.3, =0.1.0, =1.2.8, =1.0.5, =2.1.12 and more Source cves:...
apputils-config (>=2.0.2.dev19, <=2.0.2.dev20), aws-gate (>=0.9.3, <=0.11.0) +43 more potentially affected by CVE-2026-26007 via cryptography (3.3.1)
cryptography PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - apputils-config =2.0.2.dev19, =0.9.3, =0.1.1, =1.1.0, =1.2.3, =3.26.0, =0.1.1, =21.1.0, =0.1.0, =0.0.1, =0.2.0, =0.2.8 and more Source...
ali2b-cli-scrapper (>=1.0.0, <=1.0.1), ambient-edge-server (>=0.1.2, <=0.2.4) +64 more potentially affected by CVE-2026-26007 via cryptography (42.0.7)
cryptography PYPI version 42.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ali2b-cli-scrapper =1.0.0, =0.1.2, =0.2.13, =0.1.10, =2.1.0rc1, =0.3.0, =0.3.9, =2.7.0, =0.1.2, =0.1.3 - edx-repo-tools 1.0.0 and more...
c7n-azure (0.7.8), erpbrasil-assinatura (1.0.2) +2 more potentially affected by CVE-2026-26007 via cryptography (3.3.0)
cryptography PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - c7n-azure 0.7.8 - erpbrasil-assinatura 1.0.2 - myjwt 1.2.0 - swimlane-platform 10.6.0 Source cves: CVE-2026-26007 Source advisory:...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, potentially grant themselves elevated privileges and thus execute arbitrary code or gain access to sensitive data. Of the vulnerabilities labeled...
Deserialization of Untrusted Data
Overview azure-ai-language-conversations-authoring is a Microsoft Corporation Azure Ai Language Conversations Authoring Client Library for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the getcontinuationtoken function. An attacker can execute...
Cleartext Storage of Sensitive Information
Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in in Azure Compute Gallery, which writes MAA tokens in the debug log. Remediation Upgrade github.com/Microsoft/confidential-sidecar-containers/pkg/skr to version 2.12 or higher. References -...
Cleartext Storage of Sensitive Information
Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in in Azure Compute Gallery, which writes MAA tokens in the debug log. Remediation Upgrade github.com/Microsoft/confidential-sidecar-containers/pkg/common to version 2.12 or higher. References ...
Cleartext Storage of Sensitive Information
Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in in Azure Compute Gallery, which writes MAA tokens in the debug log. Remediation Upgrade github.com/Microsoft/confidential-sidecar-containers/cmd/azmount/filemanager to version 2.12 or higher...
GHSA-436V-JG82-P533 Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network...
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network...
CVE-2026-23655
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-23655
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-21531
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...
CVE-2026-21531
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...
CVE-2026-21528
Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-21529
Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...
CVE-2026-21529
Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...