57606 matches found
Pulp incorrectly assigns RBAC permissions in tasks that create objects
A flaw was found in the Pulp package. When a role-based access control RBAC object in Pulp is set to assign permissions on its creation, it uses the AutoAddObjPermsMixin typically the addrolesforobjectcreator method. This method finds the object creator by checking the current authenticated user...
PYSEC-2026-1808 Pulp incorrectly assigns RBAC permissions in tasks that create objects
A flaw was found in the Pulp package. When a role-based access control RBAC object in Pulp is set to assign permissions on its creation, it uses the AutoAddObjPermsMixin typically the addrolesforobjectcreator method. This method finds the object creator by checking the current authenticated user...
PYSEC-2026-1447 Insecure Jinja2 templates rendered in Haystack Components can lead to RCE
Impact Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. Patches The problem has been fix...
PYSEC-2026-1117 Ankitects Anki LaTeX Blocklist Bypass vulnerability
A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerability...
CVE-2026-53483
creationtimestamp| type| source ---|---|--- 2026-07-07 13:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq2olmx4az2r 2026-07-07 15:42:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2wy66mom2o 2026-07-09 03:07:07+00:00| seen|...
PYSEC-2026-1655 mlflow vulnerable to Path Traversal
A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the artifactlocation parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component in the artifact location URI to read arbitrary files on the...
PYSEC-2026-1249 Out of memory error when submitting the dataset form with a specially-crafted field
Impact When submitting a POST request to the /dataset/new endpoint including either the auth cookie or the Authorization header with a specially-crafted field, an attacker can create an out-of-memory error in the hosting server. To trigger this error the user needs to have permissions to create o...
PYSEC-2026-1170 Apache Superset users may incorrectly create resources using the import charts feature
A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and including 2.1.0...
CVE-2026-33264
creationtimestamp| type| source ---|---|--- 2026-07-07 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116878227880912732 2026-07-07 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq2fkleckz23 2026-07-07 11:38:55+00:00| seen|...
CVE-2026-57868
creationtimestamp| type| source ---|---|--- 2026-07-07 08:39:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq27ddn7ny2u...
CVE-2026-57869
creationtimestamp| type| source ---|---|--- 2026-07-07 08:34:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq272f5jnd2y...
CVE-2026-8309
creationtimestamp| type| source ---|---|--- 2026-07-07 08:24:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq26ii7rnj2b...
CVE-2026-8306
creationtimestamp| type| source ---|---|--- 2026-07-07 08:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25wlek3u2w...
CVE-2026-5799
creationtimestamp| type| source ---|---|--- 2026-07-07 07:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq24xxd3v22a...
Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...
CVE-2026-34158
creationtimestamp| type| source ---|---|--- 2026-07-07 06:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwivnajh2p 2026-07-07 07:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq23laf7j42a...
CVE-2026-34047
creationtimestamp| type| source ---|---|--- 2026-07-07 04:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqankglc2a 2026-07-07 05:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpztcxqgo42h...
CVE-2026-34168
creationtimestamp| type| source ---|---|--- 2026-07-07 03:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpearmqu23 2026-07-07 07:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzzucuahv2y...
[SECURITY] Fedora 43 Update: perl-Imager-1.032-1.fc43
Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...