matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS. !NOTE Matano offers a commercial managed Cloud SIEM for a complete enterprise Security Operations platform. Learn more. Docs | Website ...

com.codbex.atlas:codbex-atlas-application (>=2.2.0, <=2.10.0), com.codbex.hades:codbex-hades-application (>=2.2.0, <=2.10.0) +15 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.23.0)

net.snowflake:snowflake-jdbc MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0, =2.2.0, =11.5.0,...

io.trino:trino-iceberg (>=454, <=456), io.trino:trino-snowflake (>=454, <=456) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.18.0)

net.snowflake:snowflake-jdbc MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =454, =454, =2.2.1, =10.6.19, =0.1.0, =16.22.1, =16.22.1, =16.22.1, =16.22.1,...

io.trino:trino-iceberg (>=464, <=468), io.trino:trino-snowflake (>=464, <=468) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.19.1)

net.snowflake:snowflake-jdbc MAVEN version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =464, =464, =1.7.0, =10.6.32, =10.6.32, =10.6.32, =10.6.34 Source cves:...

CVE-2026-97395

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

EUVD-2026-88960

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

CVE-2026-97395 Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

CVE-2026-97395 Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

CVE-2026-97395

In Apache Polaris versions

CVE-2026-97395: Missing Authorization

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

SUSE CVE-2026-54917

SeaweedFS is a distributed storage system for object storage S3, file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway construct their routers with mux.NewRouter.SkipCleantrue. With path cleaning disabled, a .. segment inside the URL survives...

GO-2026-6329 SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets in github.com/seaweedfs/seaweedfs

SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets in github.com/seaweedfs/seaweedfs...

GHSA-HGPF-8634-G44C SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets

Summary SeaweedFS routes requests signed with SigV4 service s3tables to the S3Tables management API. Authorization on that path collapsed account-less S3 identities into the shared admin account and failed open, so a user holding only ordinary S3 Read credentials — and no S3Tables-specific...

SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets

Summary SeaweedFS routes requests signed with SigV4 service s3tables to the S3Tables management API. Authorization on that path collapsed account-less S3 identities into the shared admin account and failed open, so a user holding only ordinary S3 Read credentials — and no S3Tables-specific...

GO-2026-6221 SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access in github.com/seaweedfs/seaweedfs

SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access in github.com/seaweedfs/seaweedfs...

PT-2026-80444

SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access in github.com/seaweedfs/seaweedfs...

SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access

Summary The S3 API gateway and the Iceberg REST catalog gateway construct their routers with mux.NewRouter.SkipCleantrue. With path cleaning disabled, a .. segment inside the URL survives routing, so a request such as: GET /bucket-A/../evil-bucket/key is matched as bucket=bucket-A,...

EUVD-2026-39535

SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access...

GHSA-W62W-66V9-VVGV SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access

Summary The S3 API gateway and the Iceberg REST catalog gateway construct their routers with mux.NewRouter.SkipCleantrue. With path cleaning disabled, a .. segment inside the URL survives routing, so a request such as: GET /bucket-A/../evil-bucket/key is matched as bucket=bucket-A,...

PYSEC-2026-3623

Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials...