HPESBNW05078 rev.1 - HPE Telco Service Orchestrator Software, Privilege Escalation to Filesystem Read-Access via Automatic ConfigProvider

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-31141 |...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

RHCOS 4 : OpenShift Container Platform 4.7.13 (RHSA-2021:2122)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2122 advisory. - golang: data race in certain net/http servers including ReverseProxy can lead to DoS CVE-2020-15586 - golang: ReadUvarint and...

MAL-2026-2103 Malicious code in ty-config-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fdfad9d372aeb95a258e5f5c732b57d1d226d7101ccf09a33cd3eb93ab45d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ty-config-provider is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in ty-config-provider

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ty-config-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fdfad9d372aeb95a258e5f5c732b57d1d226d7101ccf09a33cd3eb93ab45d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0, <=1.0.2), net.praqma:drmemory-plugin (>=1.0, <=1.3) +8 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.454)

org.jenkins-ci.main:jenkins-core MAVEN version 1.454 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0, =1.0, =1.2, =0.5, =0.6.1 Source cves:...

Improper Privilege Management vulnerability in Apache Kafka Client

Apache Kafka Clients are vulnerable to improper privilege management due to the use of ConfigProvider plugins that can read from disk or environment variables. This could allow an attacker to read arbitrary contents of the disk and environment variables, potentially escalating from REST API acces...