283 matches found
GHSA-MQCG-5X36-VFCG vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips...
CVE-2026-42557 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips...
GHSA-7545-FCXQ-7J24 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx...
Chromium: CVE-2026-7917 Use after free in Fullscreen
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-35397 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
CVE-2026-40110 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
GHSA-24QX-W28J-9M6P vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
CVE-2026-40934 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
GHSA-37W4-HWHX-4RC4 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
CVE-2025-61669 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
CVE-2026-42266 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
GHSA-5789-5FC7-67V3 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
GHSA-5MRQ-X3X5-8V8F vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
GHSA-QH7Q-6QM3-653W vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, datahub-ingestion...
CVE-2026-41425 vulnerabilities
Vulnerabilities for packages: mlflow, airflow, pgadmin4-fips, datahub-ingestion-fips, datahub-ingestion, open-webui...
Gray-Box Poisoning of Continuous Malware Ingestion Pipelines
Modern malware detection pipelines rely on continuous data ingestion and machine learning to counter the high volume of novel threats. This work investigates a realistic gray-box poisoning threat model targeting these pipelines. Using the secmlmalware framework, we generate problem-space...
Prometheus vulnerable to stored XSS via crafted histogram bucket label values in the old web UI heatmap display
Impact In the Prometheus server's legacy web UI enabled via the command-line flag --enable-feature=old-ui, the histogram heatmap chart view does not escape le label values when inserting them into the HTML for use as axis tick mark labels. An attacker who can inject crafted metrics e.g. via a...
Practical Package Security: The Unofficial Guide
Get actionable best practices to shrink your attack surface, protect execution environments, control package ingestion, and catch compromises early...
CVE-2026-41419
4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the server ingest arbitrary host files as board attachments during BOARDS archive import. Once imported, the file can be...
