8821 matches found
[SECURITY] Fedora 42 Update: kubernetes1.31-1.31.14-1.fc42
Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...
Moderate: Red Hat Security Advisory: Submariner v0.21 security fixes and container updates
Submariner v0.21 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
TencentOS Server 2: kernel (TSSA-2025:0431)
"The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0431 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilitie...
kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwis...
CVE-2025-63811 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker, opentelemetry-collector-contrib, cluster-api-aws-controller, bento, grafana-alloy, sqlexporter, splunk-otel-collector, amazon-cloudwatch-agent, argo-events...
GHSA-9MJ6-HXHV-W67J vulnerabilities
Vulnerabilities for packages: jitsucom-bulker, opentelemetry-collector-contrib, cluster-api-aws-controller, bento, grafana-alloy, sqlexporter, splunk-otel-collector, amazon-cloudwatch-agent, argo-events...
CVE-2025-63811 vulnerabilities
Vulnerabilities for packages: vault-fips, grafana-alloy, jitsucom-bulker, vault, argo-events-fips, bento, amazon-cloudwatch-agent-fips, sqlexporter-fips, telegraf, argo-events, dapr, amazon-cloudwatch-agent, splunk-otel-collector-fips, opentelemetry-collector-contrib,...
GHSA-9MJ6-HXHV-W67J vulnerabilities
Vulnerabilities for packages: vault-fips, grafana-alloy, jitsucom-bulker, vault, argo-events-fips, bento, amazon-cloudwatch-agent-fips, sqlexporter-fips, telegraf, argo-events, dapr, amazon-cloudwatch-agent, splunk-otel-collector-fips, opentelemetry-collector-contrib,...
Security Advisory 0126
Security Advisory 0126 . CSAF PDF Date: November 18, 2025 Revision | Date | Changes ---|---|--- 1.0 | November 18, 2025 | Initial release The following issues were discovered during regular penetration testing of Arista’s EOS. Issues detailed cover CloudVision Exchange CVX based features includin...
CVE-2025-64709
Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery SSRF vulnerability in the Typebot webhook block HTTP Request component functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance...
CVE-2025-64709
Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery SSRF vulnerability in the Typebot webhook block HTTP Request component functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance...
EUVD-2025-175361
Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery SSRF vulnerability in the Typebot webhook block HTTP Request component functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance...
CVE-2025-64709 Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block
Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery SSRF vulnerability in the Typebot webhook block HTTP Request component functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance...
CVE-2025-64709 Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block
Typebot is an open-source chatbot builder. In versions prior to 3.13.1, a Server-Side Request Forgery SSRF vulnerability in the Typebot webhook block HTTP Request component functionality allows authenticated users to make arbitrary HTTP requests from the server, including access to AWS Instance...
CVE-2025-64709
Typebot (open-source chatbot builder) contains an SSRF flaw in the webhook block’s HTTP Request component affecting versions before 3.13.1. The issue lets authenticated users cause server-side HTTP requests, bypass IMDSv2 via custom header injection, and extract temporary AWS IAM credentials for ...
EUVD-2025-179690
Malicious code in cluster-wind-fork-view-monitor npm...
EUVD-2025-179680
Malicious code in cold-phi-cloud-cluster-private npm...
EUVD-2025-176381
Malicious code in signal-authenticate-cluster-await-byte npm...