814 matches found
GHSA-2WC2-FM75-P42X vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow, open-webui, datadog-agent, datadog-agent-fips...
CVE-2026-49476 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow, open-webui, datadog-agent, datadog-agent-fips...
CVE-2026-49477 vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent, kubeflow-pipelines-visualization-server...
GHSA-2WC2-FM75-P42X vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent, kubeflow-pipelines-visualization-server...
GHSA-836R-79RF-4M37 vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent, kubeflow-pipelines-visualization-server...
CVE-2026-49476 vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent, kubeflow-pipelines-visualization-server...
GHSA-836R-79RF-4M37 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow, open-webui, datadog-agent, datadog-agent-fips...
CVE-2026-49477 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow, open-webui, datadog-agent, datadog-agent-fips...
CVE-2026-57522
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
EUVD-2026-39543
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
PT-2026-52576
Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.5.0 Description An issue exists in the IntegrationTemplateProcessor.ReplaceTokens function where user-controlled values are substituted into event-integration templates without proper JSON encoding. An...
CVE-2026-57522: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: terraform-provider-acme-fips, cadvisor, crossplane-function-patch-and-transform-fips, crossplane-provider-aws-macie2, prometheus-mongodb-exporter, atlas, kine, grafana-pyroscope-fips, metrics-server-fips, apm-server, snyk-cli, kubernetes-csi-external-snapshotter-fips...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: terraform-provider-acme-fips, cadvisor, crossplane-function-patch-and-transform-fips, crossplane-provider-aws-macie2, prometheus-mongodb-exporter, atlas, kine, grafana-pyroscope-fips, metrics-server-fips, apm-server, snyk-cli, kubernetes-csi-external-snapshotter-fips...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: kiali, crossplane-provider-aws-cloudfront, aws-efs-csi-driver, cluster-api-helm-controller, keda, docker, crossplane-provider-azure-storage, dbmate, dapr, gatekeeper, gitness, k9s, tekton-chains, telegraf, wolfictl, cert-manager-istio-csr,...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: kiali, crossplane-provider-aws-cloudfront, aws-efs-csi-driver, cluster-api-helm-controller, keda, docker, crossplane-provider-azure-storage, dbmate, dapr, gatekeeper, gitness, k9s, tekton-chains, telegraf, wolfictl, cert-manager-istio-csr,...
CVE-2026-48522 vulnerabilities
Vulnerabilities for packages: kserve, datadog-agent, ggshield, superset...
CVE-2026-48524 vulnerabilities
Vulnerabilities for packages: kserve, datadog-agent, ggshield, superset...