308 matches found
GHSA-6R2R-WW24-7H52 vulnerabilities
Vulnerabilities for packages: checkov, datahub-ingestion-fips, opal, awx, datahub-ingestion, mlflow...
CVE-2026-67325 vulnerabilities
Vulnerabilities for packages: checkov, datahub-ingestion-fips, opal, awx, datahub-ingestion, mlflow...
GHSA-M4F3-G4CQ-HQRX vulnerabilities
Vulnerabilities for packages: mlflow-fips, checkov, datahub-ingestion-fips, opal, awx, datahub-ingestion, mlflow...
CVE-2026-67323 vulnerabilities
Vulnerabilities for packages: checkov, datahub-ingestion-fips, opal, awx, datahub-ingestion, mlflow...
CVE-2026-67322 vulnerabilities
Vulnerabilities for packages: mlflow-fips, checkov, datahub-ingestion-fips, opal, awx, datahub-ingestion, mlflow...
GHSA-4VPG-PFJ8-M33Q vulnerabilities
Vulnerabilities for packages: checkov, datahub-ingestion-fips, opal, awx, datahub-ingestion, mlflow...
Elastic Beats filebeat 8.0.x < 8.19.18 / 9.0.x < 9.3.1 DoS (ESA-2026-165)
The version of Elastic Beats filebeat installed on the remote host is 8.0.x prior to 8.19.18, or 9.0.x prior to 9.3.1. It is, therefore, affected by a denial of service vulnerability. - Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via...
CVE-2026-49830
DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, when ingesting an aggregated ORE resource by URI using the OAI-ORE Harvester, the ORE Ingestion Crosswalk does not validate the URI scheme. This...
CVE-2026-49830
DSpace 's OREIngestionCrosswalk (in dspace-api) fails to validate the URI scheme when ingesting an aggregated ORE resource by URI via the OAI-ORE Harvester. An attacker with collection administrator privileges (or via a compromised OAI endpoint) can supply malicious ORE XML containing a file:/// ...
CVE-2026-49830 DSpace: ORE resource URI does not validate scheme for non-web resources
DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, when ingesting an aggregated ORE resource by URI using the OAI-ORE Harvester, the ORE Ingestion Crosswalk does not validate the URI scheme. This...
CVE-2026-78588
Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the...
CVE-2026-78588 Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service
Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the...
CVE-2026-78588
Filebeat (Elastic) is affected by an uncontrolled resource allocation vulnerability (CWE-770) in its HTTP ingestion endpoint . An attacker with network access to this endpoint can send specially crafted compressed requests that exhaust the memory of the Filebeat process, causing a denial of servi...
CVE-2026-78588 Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service
Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the...
EUVD-2026-70066
Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the...
Medium: log4j
Issue Overview: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0. The fix for CVE-2026-34481 did not cover al...
Chromium: CVE-2026-79184 Missing authorization in Preload
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-81491
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingestnotes/teleportnotes/syncnotes/projectfolder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been publishe...