27 matches found
CVE-2026-93853
The Barman backup tool is vulnerable to unverified ownership during snapshot backup deletion, affecting versions up to and including 3.20.0 (specifically versions from 3.4.0 for Google Cloud, 3.6.0 for Azure, and 3.7.0 for AWS). The root cause is that Barman reads snapshot identifiers from the ba...
EUVD-2026-89463
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...
GO-2026-5106 vulnerabilities
Vulnerabilities for packages: plugin-barman-cloud-fips, cloudnative-pg, plugin-barman-cloud, cloudnative-pg-fips...
GHSA-423P-G724-FR39 vulnerabilities
Vulnerabilities for packages: cloudnative-pg...
CVE-2026-44477 vulnerabilities
Vulnerabilities for packages: cloudnative-pg...
GHSA-423P-G724-FR39 vulnerabilities
Vulnerabilities for packages: plugin-barman-cloud-fips, cloudnative-pg, plugin-barman-cloud, cloudnative-pg-fips...
CVE-2026-44477 vulnerabilities
Vulnerabilities for packages: plugin-barman-cloud-fips, cloudnative-pg, plugin-barman-cloud, cloudnative-pg-fips...
GHSA-PC3F-X583-G7J2 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-api, cert-manager-istio-csr, skaffold, teleport, rancher-fleet, redis-operator, kwok, k3s, docker-cli-buildx, gitlab-runner, datadog-agent, trivy, argo-rollouts, k8sgpt-operator, kiali, helm, percona-server-mongodb-operator, verticadb-operator,...
CVE-2026-35469 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-api, cert-manager-istio-csr, skaffold, teleport, rancher-fleet, redis-operator, kwok, k3s, docker-cli-buildx, gitlab-runner, datadog-agent, trivy, argo-rollouts, k8sgpt-operator, kiali, helm, percona-server-mongodb-operator, verticadb-operator,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: nuclei, vault-env, step-kms-plugin, gcsfuse, neuvector-scanner, cert-manager-cmctl, cloud-provider-vsphere, scorecard, opentofu, contour, rancher-fleet, boring-registry, kubernetes-csi-external-health-monitor, apisix-ingress-controller, tailscale, vault-benchmark,...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, apache-beam-python-3.12-sdk, airflow, py3-cassandra-medusa, ggshield, gitlab-cng-fips, prefect, nemo, dagster, authentik, pgadmin4-fips, open-webui, jupyter-base-notebook, datadog-agent-fips, kubeflow-pipelines-visualization-server, wazuh-manager,...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: k8s-sidecar, apache-beam-python-3.12-sdk, airflow, py3-cassandra-medusa, ggshield, gitlab-cng-fips, prefect, nemo, dagster, authentik, pgadmin4-fips, open-webui, jupyter-base-notebook, datadog-agent-fips, kubeflow-pipelines-visualization-server, wazuh-manager,...
EUVD-2006-6594
Malware in sbrugna...
CVE-2025-50181 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, airflow, azure-functions-host, py3-cassandra-medusa, jupyter-docker-stacks, kubeflow-katib, ansible-operator-fips, ggshield, nemo, dask-gateway, openstack-kolla-toolbox-2025.1-fips, confluent-docker-utils, pgadmin4-fips, spamcheck, jupyter-base-notebook,...
GHSA-48P4-8XCF-VXJ5 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, airflow, py3-cassandra-medusa, jupyter-docker-stacks, kubeflow-katib, ggshield, py3.9-pip, nemo, dask-gateway, confluent-docker-utils, reflex, spamcheck, jupyter-base-notebook, az, datadog-agent-fips, jwt-tool, py3-pip, barman, pgadmin4,...
CVE-2025-50182 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, airflow, py3-cassandra-medusa, jupyter-docker-stacks, kubeflow-katib, ggshield, py3.9-pip, nemo, dask-gateway, confluent-docker-utils, reflex, spamcheck, jupyter-base-notebook, az, datadog-agent-fips, jwt-tool, py3-pip, barman, pgadmin4,...
GHSA-PQ67-6M6Q-MJ2V vulnerabilities
Vulnerabilities for packages: k8s-sidecar, airflow, azure-functions-host, py3-cassandra-medusa, jupyter-docker-stacks, kubeflow-katib, ansible-operator-fips, ggshield, nemo, dask-gateway, openstack-kolla-toolbox-2025.1-fips, confluent-docker-utils, pgadmin4-fips, spamcheck, jupyter-base-notebook,...
GHSA-75C5-XW7C-P5PM vulnerabilities
Vulnerabilities for packages: barman, py3-pyjwt, az...
