CVE-2026-41842

The CVE-2026-41842 entry affects Spring Framework in Spring MVC and WebFlux, reporting a Denial of Service (DoS) when resolving static resources. Affected versions are Spring Framework 7.0.0–7.0.7; 6.2.0–6.2.18; 6.1.0–6.1.27; 5.3.0–5.3.48. The description in both records states the DoS vulnerabil...

CVE-2026-41840

Spring WebFlux applications are vulnerable to Denial of Service DoS attacks when processing multipart requests. Affected versions: Spring Framework 7.0.0 through 7.0.7, 6.2.0 through 6.2.18, 6.1.0 through 6.1.27, 5.3.0 through 5.3.48...

Silent Ransom Group Uses Fast Flux Botnet to Hide Law Firm Leak Sites

Cybersecurity firm Resecurity reports Silent Ransom Group is using a fast flux botnet to hide data leak sites while targeting law firms with theft and vishing...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

CVE-2026-42502 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, snyk-cli, glab, karpenter, prometheus, hydra, nerdctl, crossplane-provider-azure-authorization, prometheus-operator, helm, telegraf, crossplane-provider-aws-elasticache, falco-no-driver, zot, caddy, ingress-nginx-controller, kyverno,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi-language-dotnet, argo-events, gitsign, snyk-cli, osv-scanner, wolfictl, argocd-image-updater, guac, skaffold, crossplane, syft, flux-image-automation-controller, gomplate, gitlab-runner, goreleaser, pulumi-language-java, zot, trufflehog,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi-language-dotnet, argo-events, gitsign, snyk-cli, osv-scanner, wolfictl, argocd-image-updater, guac, skaffold, crossplane, syft, flux-image-automation-controller, gomplate, gitlab-runner, goreleaser, pulumi-language-java, zot, trufflehog,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi-language-dotnet, argo-events, gitsign, snyk-cli, osv-scanner, wolfictl, argocd-image-updater, guac, skaffold, crossplane, syft, flux-image-automation-controller, gomplate, gitlab-runner, goreleaser, pulumi-language-java, zot, trufflehog,...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: argo-workflows, pulumi-language-dotnet, argo-events, gitsign, snyk-cli, osv-scanner, wolfictl, argocd-image-updater, guac, skaffold, crossplane, syft, flux-image-automation-controller, gomplate, gitlab-runner, goreleaser, pulumi-language-java, zot, trufflehog,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: syft-fips, pulumi-language-java, crossplane-fips, flux, act, cg, guac, trivy-operator-fips, kubevela-fips, terragrunt, terragrunt-fips, pulumi, tfsec, kargo, src-fingerprint-fips, cloudbeat-fips, external-secrets-operator-fips, coder-fips, external-secrets-operator,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: syft-fips, pulumi-language-java, crossplane-fips, flux, act, cg, guac, trivy-operator-fips, kubevela-fips, terragrunt, terragrunt-fips, pulumi, tfsec, kargo, src-fingerprint-fips, cloudbeat-fips, external-secrets-operator-fips, coder-fips, external-secrets-operator,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: syft-fips, pulumi-language-java, crossplane-fips, flux, act, cg, guac, trivy-operator-fips, kubevela-fips, terragrunt, terragrunt-fips, pulumi, tfsec, kargo, src-fingerprint-fips, cloudbeat-fips, external-secrets-operator-fips, coder-fips, external-secrets-operator,...