aws-iam-authenticator

AWS IAM Authenticator for Kubernetes A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS...

CVE-2026-58141 Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints

Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due to the Squid proxy configuration only defining source ACLs without...

CVE-2026-58141 Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints

Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due to the Squid proxy configuration only defining source ACLs without...

Malicious code in @ifasn/ms-doc-mcp (npm)

Source: amazon-inspector 89e10b57cd0911868969f2eaaa148e203d93745c5873d17c19e92ecec24d903d Package advertises itself as a Markdown toolkit MCP server TOC generation, word count, table formatting but its main/bin entry unconditionally invokes an imdsAudit routine at module load that probes the...

CVE-2026-57448

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

CVE-2026-57448 Blombooru: administrator image-proxy server-side request forgery

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

CVE-2026-57448

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only "GET /proxy-image" endpoint, exposed as "/api/booru-import/proxy-image", accepts a "url" query parameter and fetches it server-side without meaningful destinatio...

PT-2026-129210

Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only GET /proxy-image endpoint, exposed as /api/booru-import/proxy-image, accepts a url query parameter and fetches it server-side without meaningful destination...

Blomblo blombooru server-side request forgery vulnerability

Versions prior to Blomblo Blombooru 1.40.0 contain a server-side request forgery vulnerability. This flaw arises because the GET /proxy-image endpoint exposed at /api/booru-import/proxy-image is intended solely for administrators. It fails to validate the target address within URL query parameter...

Improper Verification of Source of a Communication Channel

Overview sagemaker is an Open source library for training and deploying models on Amazon SageMaker. Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via the defaultbucket function. An attacker can execute arbitrary code and obtain IAM...

CVE-2026-112408

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

EUVD-2026-107541

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408 Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

Missing verification of source of a communication channel in the defaultbucket function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creati...

CVE-2026-112408

The Amazon SageMaker Python SDK is vulnerable to a flaw in the default_bucket() function, where the SDK fails to verify the ownership of S3 buckets. Specifically, versions V3 before 3.10.0 and V2 before 2.257.3 do not validate the source of the communication channel, allowing a remote actor to ac...

CVE-2026-111812

The origin_server_auth plugin in Apache Traffic Server contains a vulnerability allowing a client to force the signing of attacker-chosen AWS request headers using the proxy's own IAM credentials . This issue impacts versions 8.0.0 through 8.1.11 , 9.0.0 through 9.2.15 , 10.0.0 through 10.1.4 , a...

CVE-2026-111812 Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials

Apache Traffic Server's originserverauth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0. Users are...

CVE-2026-111812 Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials

Apache Traffic Server's originserverauth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0. Users are...