74 matches found
GHSA-HQVF-45JJ-MCCQ vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-18654 vulnerabilities
Vulnerabilities for packages: localstack...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: go, flux-source-watcher, temporal-fips, localstack, stakater-reloader, victoriametrics-fips, aws-ebs-csi-driver, metacontroller, grafana-operator, victoriametrics, loki-fips, flux-operator-fips, victoriametrics-cluster-fips, amazon-k8s-cni-fips, flux-source-controlle...
GHSA-464C-974J-9XM6 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-13769 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-WFP6-F47H-HXC3 vulnerabilities
Vulnerabilities for packages: localstack...
EUVD-2026-48434
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
CVE-2026-16763 affects localstack serverless-localstack up to version 1.4.0. The vulnerability targets an unknown function in src/index.js of the Configuration Handler, where manipulating the argument custom.localstack.docker.compose_file enables local OS command injection. The CVE describes loca...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
PT-2026-64183
Name of the Vulnerable Software and Affected Versions localstack serverless-localstack versions prior to 1.4.1 Description An OS command injection issue exists within the Configuration Handler component in the src/index.js file. This occurs when the custom.localstack.docker.compose file argument ...
GHSA-6W46-J5RX-G56G vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, localstack, apache-beam-python-3.13-sdk, py3-cassandra-medusa, request-1276...
CVE-2025-71176 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, localstack, apache-beam-python-3.13-sdk, py3-cassandra-medusa, request-1276...
GHSA-54JJ-PX8X-5W5Q vulnerabilities
Vulnerabilities for packages: dbt-core, localstack, dbt-snowflake, dbt-bigquery...
GHSA-P2M9-WCP5-6QW3 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-33155 vulnerabilities
Vulnerabilities for packages: dbt-core, localstack, dbt-snowflake, dbt-bigquery...
CVE-2026-28356 vulnerabilities
Vulnerabilities for packages: localstack...