406 matches found
CVE-2026-44903 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, mc, fluent-bit-plugin-loki, minio, opentelemetry-collector, trillian, karma, metrics-server, loki, mcp-grafana, telegraf, prometheus-pushgateway, k8sgpt, splunk-otel-collector, aws-otel-collector, tempo, cloud-sql-proxy, keda,...
GHSA-VFFH-X6R8-XX99 vulnerabilities
Vulnerabilities for packages: mc, minio, trillian, karma, loki, mcp-grafana, telegraf, prometheus-pushgateway, splunk-otel-collector, aws-otel-collector, tempo, cloud-sql-proxy, keda, certificate-transparency, istio, jaeger, minio-object-browser, grafana-pyroscope, minio-operator, datadog-agent...
CVE-2026-40179 vulnerabilities
Vulnerabilities for packages: mc, minio, trillian, karma, loki, mcp-grafana, telegraf, prometheus-pushgateway, splunk-otel-collector, aws-otel-collector, tempo, cloud-sql-proxy, keda, certificate-transparency, istio, jaeger, minio-object-browser, grafana-pyroscope, minio-operator, datadog-agent...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: github-mcp-server, volume-modifier-for-k8s-fips, flux-operator-fips, kube-logging-logging-operator, flux-source-controller, aws-privateca-issuer, pluto, mountpoint-s3-csi-driver, pluto-fips, rabbitmq-messaging-topology-operator-fips, flux-source-controller-fips,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: github-mcp-server, volume-modifier-for-k8s-fips, flux-operator-fips, kube-logging-logging-operator, flux-source-controller, aws-privateca-issuer, pluto, mountpoint-s3-csi-driver, pluto-fips, rabbitmq-messaging-topology-operator-fips, flux-source-controller-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3-fips, dapr, github-mcp-server, kube-vip, mongo-tools-fips, prometheus-elasticsearch-exporter-fips, kuma, kubescape-http-request, flux-operator-fips, kubevirt-cdi-controller-fips, influx, pgpool2exporter, flux-source-controller,...
CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0
Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
UBUNTU-CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
EUVD-2026-5199
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
CVE-2026-25236 affects the PEAR PHP framework. The vulnerability is a SQL injection risk in karma queries caused by unsafe literal substitution for an IN (...) list. Root cause: unsafe literal handling in Karma DAMBLAN-related queries prior to version 1.33.0. Impact: potential SQL injection. Miti...
CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
PT-2026-6285
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...