210 matches found
EUVD-2026-117213
Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...
PT-2026-137324
Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. Attackers can create a namespaced Policy with generate rules targeti...
CVE-2026-120091
Temporal Server is vulnerable to OS command injection because the k8s compute provider (part of the go.temporal.io/auto-scaled-workers module) builds a Kubernetes client using caller-supplied configuration instead of operator configuration. An authenticated caller with only a read role in a singl...
CVE-2026-120091
Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to manage workers running in a Kubernetes cluster. The k8s provider built its Kubernetes client from...
CVE-2026-105614
PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...
CVE-2026-105613
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on, which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 a...
CVE-2026-105613 PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on, which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 a...
CVE-2026-105614 PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()
PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...
EUVD-2026-112285
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on, which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 a...
CVE-2026-105614 PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()
PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...
CVE-2026-105613 PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on, which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 a...
CVE-2026-105614
PostgreSQL Anonymizer's "anon.imageblur" function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is o...
CVE-2026-105613
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on, which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 a...
EUVD-2026-112286
PostgreSQL Anonymizer's anon.imageblur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on,...
CVE-2026-105614
The PostgreSQL Anonymizer extension contains a memory allocation vulnerability in the anon.image_blur() function. The issue stems from a lack of dimension validation for provided images, allowing an attacker to submit a small image with enormous declared dimensions . This can lead to memory exhau...
PT-2026-129068
PostgreSQL Anonymizer's anon.image blur function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on...
CVE-2026-105613: Memory Allocation with Excessive Size Value
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on, which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 a...
DALIBO PostgreSQL Anonymizer resource management error vulnerability
Versions of DALIBO PostgreSQL Anonymizer prior to 3.3.0 contain a resource management error vulnerability. This vulnerability arises because range-based virtual functions fail to limit their scope size; it may exhaust backend memory and trigger an OOM termination, resulting in a cluster-wide cras...
DALIBO PostgreSQL Anonymizer resource management error vulnerability
Versions prior to DALIBO PostgreSQL Anonymizer 3.3.0 contain a resource management error vulnerability. This vulnerability arises because the anon.imageblur function fails to validate the declared size of provided images. Attackers can supply small images with excessively large declared sizes,...
PT-2026-129067
PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it when ovecommit is on, which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 a...