100 matches found
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
CVE-2026-16763 affects localstack serverless-localstack up to version 1.4.0. The vulnerability targets an unknown function in src/index.js of the Configuration Handler, where manipulating the argument custom.localstack.docker.compose_file enables local OS command injection. The CVE describes loca...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
PT-2026-64183
Name of the Vulnerable Software and Affected Versions localstack serverless-localstack versions prior to 1.4.1 Description An OS command injection issue exists within the Configuration Handler component in the src/index.js file. This occurs when the custom.localstack.docker.compose file argument ...
azdev (0.0.5), pyswarms (>=0.3.0, <=0.3.1) +3 more potentially affected by CVE-2025-71176 via pytest (3.6.4)
pytest PYPI version 3.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - azdev 0.0.5 - pyswarms =0.3.0, =0.8.0, =0.1.0, =0.1.3 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...
GHSA-6W46-J5RX-G56G vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.13-sdk, open-webui, apache-beam-python-3.12-sdk, py3-cassandra-medusa, request-1276, apache-beam-python-3.11-sdk, localstack...
CVE-2025-71176 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.13-sdk, open-webui, apache-beam-python-3.12-sdk, py3-cassandra-medusa, request-1276, apache-beam-python-3.11-sdk, localstack...
CVE-2026-28356 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-P2M9-WCP5-6QW3 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-33155 vulnerabilities
Vulnerabilities for packages: dbt-bigquery, localstack, dbt-core, dbt-snowflake...
GHSA-54JJ-PX8X-5W5Q vulnerabilities
Vulnerabilities for packages: dbt-bigquery, localstack, dbt-core, dbt-snowflake...
GHSA-W5R5-M38G-F9F9 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-27932 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-747P-WMPV-9C78 vulnerabilities
Vulnerabilities for packages: localstack...
azdev (0.0.5), pyswarms (>=0.3.0, <=0.3.1) +3 more potentially affected by CVE-2025-71176 via pytest (3.6.4)
pytest PYPI version 3.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - azdev 0.0.5 - pyswarms =0.3.0, =0.8.0, =0.1.0, =0.1.3 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...