airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

airflowscan

airflowscan 用于增强 Apache Airflow 安全性的检查清单和工具。 免责声明 本项目与 Apache 基金会和 Airflow 项目无任何关联 ，也未获得它们的认可。 目录 本项目的目的是提供工具，以增强 Apache Airflow 安装的安全性。本项目提供以下工具： 包含强化设置的配置文件 - 请参见 hardenedairflow.cfg。 用于强化默认安装的安全检查清单 - 请参见 CHECKLIST.MD。 用于检查 Airflow 配置文件是否存在不安全设置的静态分析工具。 静态分析工具用于验证的 JSON schema 文档 - 请参见...

polaris

Polaris 是 Kubernetes 的一个开源策略引擎 Polaris 是 Kubernetes 的一个开源策略引擎，用于验证和修复资源配置。它包含 30 多个内置配置策略，并支持使用 JSON Schema 构建自定义策略。当以命令行模式或作为突变 Webhook 运行时，Polaris 能够根据策略标准自动修复问题。 Polaris 可以在三种不同模式下运行： 作为仪表盘 - 根据策略即代码验证 Kubernetes 资源。 作为准入控制器 - 自动拒绝或修改不符合组织策略的工作负载。 作为命令行工具 - 将策略即代码集成到 CI/CD 流程中，用于测试本地 YAML 文件。...

CVE-2026-34308

CVE-2026-34308: Denegación de servicio en MySQL Server componente JSON Boletín oficial del proveedor: Oracle Critical Patch Update Advisory — April 2026. Resumen según el CVE publicado Vulnerabilidad en Oracle MySQL Server componente: Server: JSON. Versiones afectadas compatibles: 8.0.0–8.0.45 ,...

CVE-2026-82058

A flaw in MongoDBs JSON Schema validation error generation code allow...

UBUNTU-CVE-2026-82058

A flaw in MongoDBs JSON Schema validation error generation code allow...

Linux Distros Unpatched Vulnerability : CVE-2026-82058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON...

CVE-2026-82058

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

CVE-2026-82058

MongoDB 's mongod server is vulnerable to a denial-of-service flaw in its JSON Schema validation error generation code. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error path performs an unsafe numeric conversion on t...

EUVD-2026-72945

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

CVE-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

K000163236: Node.js vulnerability CVE-2021-3918

Security Advisory Description json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' CVE-2021-3918 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has...

CVE-2026-84428

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the...

CVE-2026-84428

A flaw was found in fastify. Due to incomplete case normalization of HTTP header names within a route's header schema, specifically within the JSON Schema Draft 7 dependencies keyword, an unauthenticated remote attacker can bypass intended conditional checks. This allows the attacker to send...

EUVD-2026-70998

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the...

CVE-2026-84428 fastify vulnerable to header validation bypass via incomplete schema case normalization

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the...

CVE-2026-84469

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to...

EUVD-2026-70989

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to...

Linux Distros Unpatched Vulnerability : CVE-2026-52130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service. CVE-2026-52130 Note...