airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

airflowscan

airflowscan Apache Airflow의 보안을 강화하기 위한 체크리스트 및 도구입니다. 면책 조항 이 프로젝트는 Apache Foundation 및 Airflow 프로젝트와 제휴 관계가 없으며, 이들로부터 승인받지 않았습니다. 목차 이 프로젝트의 목적은 Apache Airflow 설치의 보안을 강화하는 도구를 제공하는 것입니다. 이 프로젝트는 다음 도구들을 제공합니다: 보안 설정이 강화된 구성 파일 - hardenedairflow.cfg 참조. 기본 설치 보안 강화를 위한 보안 체크리스트 - CHECKLIST.MD...

polaris

Polaris는 Kubernetes를 위한 오픈 소스 정책 엔진입니다 Polaris는 Kubernetes 리소스 구성을 검증하고 수정하는 오픈 소스 정책 엔진입니다. 30개 이상의 내장 구성 정책과 JSON Schema를 사용한 사용자 정의 정책 작성 기능을 제공합니다. 명령줄 또는 뮤테이팅 웹훅으로 실행 시 Polaris는 정책 기준에 따라 문제를 자동으로 수정할 수 있습니다. Polaris는 세 가지 모드로 실행할 수 있습니다: 대시보드로 - 정책-코드 방식으로 Kubernetes 리소스를 검증합니다. 어드미션 컨트롤러로 ...

CVE-2026-103036

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoercer to collect object properties in a plain object and to resolve schema.properties entries through the prototype chain...

CVE-2026-103036

The oRPC tool (specifically the @orpc/json-schema SmartCoercionPlugin ) is vulnerable to a prototype injection issue in versions prior to 1.14.9 . The root cause is the use of JsonSchemaCoercer to resolve schema.properties entries through the prototype chain. A remote client can supply __proto__ ...

CVE-2026-103036 @orpc/json-schema: Prototype injection in smart coercion

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoercer to collect object properties in a plain object and to resolve schema.properties entries through the prototype chain...

CVE-2026-103036 @orpc/json-schema: Prototype injection in smart coercion

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoercer to collect object properties in a plain object and to resolve schema.properties entries through the prototype chain...

CVE-2026-103036: Improperly Controlled Modification of Dynamically-Determined Object Attributes

oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoercer to collect object properties in a plain object and to resolve schema.properties entries through the prototype chain...

CVE-2026-34308

CVE-2026-34308: MySQL Server（JSONコンポーネント）サービス拒否 公式ベンダー速報: Oracle Critical Patch Update Advisory — April 2026。 概要（公開済みCVEより） Oracle MySQL Server（コンポーネント: Server: JSON）における脆弱性。 影響を受けるサポート対象バージョン: 8.0.0–8.0.45 、8.4.0–8.4.8 、および 9.0.0–9.6.0 。 この脆弱性により、低権限ユーザーがMySQL Serverをクラッシュさせることが可能です。 CVSS...

EUVD-2026-70989

fastify vulnerable to request validation bypass via skipped boolean false schemas...

fastify vulnerable to request validation bypass via skipped boolean false schemas

Impact Fastify decided whether to validate a request part by checking its schema for JavaScript truthiness. JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance, but because false is falsy, a route that set body, querystring, params, or headers to false had...

EUVD-2026-70998

fastify vulnerable to header validation bypass via incomplete schema case normalization...

BIT-MONGODB-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

Astra Linux – Vulnerability in node-ajv

The ajv Another JSON Schema Validator before version 8.18.0 is vulnerable to Regular Expression Denial of Service ReDoS when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax $data reference, which is passed directly to the JavaScript RegExp constructor...

Astra Linux – Vulnerability in node-json-schema

JSON-schema is vulnerable to improperly controlled modification of object prototype attributes known as “Prototype Pollution”...

Linux Distros Unpatched Vulnerability : CVE-2026-82058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON...

CVE-2026-82058

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

CVE-2026-82058

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

UBUNTU-CVE-2026-82058

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

CVE-2026-82058

MongoDB 's mongod server is vulnerable to a denial-of-service flaw in its JSON Schema validation error generation code. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error path performs an unsafe numeric conversion on t...