856 matches found
CVE-2026-49476 vulnerabilities
Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server, airflow, datadog-agent-fips, open-webui...
GHSA-2WC2-FM75-P42X vulnerabilities
Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server, airflow, datadog-agent-fips, open-webui...
CVE-2026-49476 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
CVE-2026-49477 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
GHSA-2WC2-FM75-P42X vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
GHSA-836R-79RF-4M37 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
CVE-2026-49477 vulnerabilities
Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server, airflow, datadog-agent-fips, open-webui...
GHSA-836R-79RF-4M37 vulnerabilities
Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server, airflow, datadog-agent-fips, open-webui...
CVE-2026-57522
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
EUVD-2026-39543
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
PT-2026-52576
Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.5.0 Description An issue exists in the IntegrationTemplateProcessor.ReplaceTokens function where user-controlled values are substituted into event-integration templates without proper JSON encoding. An...
CVE-2026-57522: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: terraform, crossplane-function-auto-ready-fips, telegraf, dataplaneapi, percona-xtradb-cluster-operator, prometheus, kapp-controller, gcp-compute-persistent-disk-csi-driver, grype-db, kubernetes-csi-livenessprobe-fips, rancher-agent, docker-machine-driver-harvester,...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: terraform, crossplane-function-auto-ready-fips, telegraf, dataplaneapi, percona-xtradb-cluster-operator, prometheus, kapp-controller, gcp-compute-persistent-disk-csi-driver, grype-db, kubernetes-csi-livenessprobe-fips, rancher-agent, docker-machine-driver-harvester,...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: containerd, secrets-store-csi-driver, step, azure-workload-identity-webhook, jaeger-operator, coredns, fulcio, harbor-registry, kube-metrics-adapter, kubo, cass-operator, kots, vault-env, argo-events, crossplane-provider-sql, rclone, falcosidekick, gitlab-kas,...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: containerd, secrets-store-csi-driver, step, azure-workload-identity-webhook, jaeger-operator, coredns, fulcio, harbor-registry, kube-metrics-adapter, kubo, cass-operator, kots, vault-env, argo-events, crossplane-provider-sql, rclone, falcosidekick, gitlab-kas,...
CVE-2026-48523 vulnerabilities
Vulnerabilities for packages: ggshield, kserve, datadog-agent, superset...
CVE-2026-48524 vulnerabilities
Vulnerabilities for packages: ggshield, kserve, datadog-agent, superset...