1495 matches found
PYSEC-2026-2230
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embedimages=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook...
CVE-2026-39378 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embedimages=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook...
CVE-2026-39378 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embedimages=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook...
CVE-2026-39378 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embedimages=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook...
CVE-2026-39378
nbconvert (jupyter nbconvert) versions 6.5–7.17.0 are vulnerable when HTMLExporter.embed_images is enabled, because the markdown renderer allows arbitrary file reads via path traversal in image references. A malicious notebook could exfiltrate sensitive host files by embedding them as base64 data...
Linux Distros Unpatched Vulnerability : CVE-2026-39378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when...
Allocation of Resources Without Limits or Throttling
Overview OpenTelemetry.Exporter.Jaeger is a Jaeger exporter for OpenTelemetry .NET Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the span and tag conversion. An attacker can drive sustained memory pressure and denial of service by...
GHSA-38H3-2333-QX47 OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path
Summary !IMPORTANT There is no plan to fix this issue as OpenTelemetry.Exporter.Jaeger was deprecated in 2023. It is for informational purposes only. OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on a large observed span/tag set...
OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path
Summary !IMPORTANT There is no plan to fix this issue as OpenTelemetry.Exporter.Jaeger was deprecated in 2023. It is for informational purposes only. OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on a large observed span/tag set...
PT-2026-33598
Name of the Vulnerable Software and Affected Versions OpenTelemetry.Exporter.Jaeger affected versions not specified Description This issue allows sustained memory pressure when the internal pooled-list sizing grows based on a large observed span or tag set and that enlarged size is reused for...
GHSA-HC8W-H2MF-HP59 vulnerabilities
Vulnerabilities for packages: falco-no-driver...
CVE-2026-33414 vulnerabilities
Vulnerabilities for packages: falco-no-driver...
GHSA-HC8W-H2MF-HP59 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips, falco-no-driver...
CVE-2026-33414 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips, falco-no-driver...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, emissary, croc, q, terraform-provider-aws, vault-secrets-webhook, hugo, nova, nri-redis, litestream, libnvidia-container, rook, timoni, cloud-provider-aws, metacontroller, clickhouse-operator,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, otel-cli, cis-operator, k3s, sftpgo-plugin-pubsub, azure-service-operator, amazon-cloudwatch-agent-operator, aws-node-termination-handler, db-operator, go-discover, kubernetes-dashboard-api, kube-state-metrics,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, emissary, croc, q, terraform-provider-aws, vault-secrets-webhook, hugo, nova, nri-redis, litestream, libnvidia-container, rook, timoni, cloud-provider-aws, metacontroller, clickhouse-operator,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator, crane, regclient, cortex, go-licenses, emissary, croc, q, terraform-provider-aws, vault-secrets-webhook, hugo, nova, nri-redis, litestream, libnvidia-container, rook, timoni, cloud-provider-aws, metacontroller, clickhouse-operator,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: argo-cd, vault-benchmark, rke2-runtime-fips, knative-operator, splunk-otel-collector, libnvidia-container, flux-source-watcher-fips, kine, argo-workflows, tekton-pipelines, kpt, azurefile-csi-fips, knative-operator-fips, extism, redka, snyk-cli,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: argo-cd, vault-benchmark, rke2-runtime-fips, knative-operator, splunk-otel-collector, libnvidia-container, flux-source-watcher-fips, kine, argo-workflows, tekton-pipelines, kpt, azurefile-csi-fips, knative-operator-fips, extism, redka, snyk-cli,...