76 matches found
cicd-goat
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...
CVE-2022-27251
CVE-2022-27251 Remote Code Execution in LocalStack 0.12.6 Due to the lack of sanitization on user input on the Lambda API handler field whilst spawning Lambda functions and the way Docker containers are insecurely spawned, an injection can be provided through AWS CLI in the --handler option to be...
GO-2026-6093 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-HQVF-45JJ-MCCQ vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-18654 vulnerabilities
Vulnerabilities for packages: localstack...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver-fips, cert-manager-fips, grafana-operator, stakater-reloader, victoriametrics, dkron, grafana-rollout-operator, flux-helm-controller, librechat, victoriametrics-cluster, victoriametrics-fips, aws-ebs-csi-driver, flux-source-controller, polaris,...
CVE-2026-13769 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-464C-974J-9XM6 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-WFP6-F47H-HXC3 vulnerabilities
Vulnerabilities for packages: localstack...
EUVD-2026-48434
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
CVE-2026-16763 affects localstack serverless-localstack up to version 1.4.0. The vulnerability targets an unknown function in src/index.js of the Configuration Handler, where manipulating the argument custom.localstack.docker.compose_file enables local OS command injection. The CVE describes loca...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
PT-2026-64183
Name of the Vulnerable Software and Affected Versions localstack serverless-localstack versions prior to 1.4.1 Description An OS command injection issue exists within the Configuration Handler component in the src/index.js file. This occurs when the custom.localstack.docker.compose file argument ...
GHSA-6W46-J5RX-G56G vulnerabilities
Vulnerabilities for packages: localstack, py3-cassandra-medusa, open-webui, request-1276, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk...
CVE-2025-71176 vulnerabilities
Vulnerabilities for packages: localstack, py3-cassandra-medusa, open-webui, request-1276, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk...
GHSA-54JJ-PX8X-5W5Q vulnerabilities
Vulnerabilities for packages: dbt-bigquery, localstack, dbt-core, dbt-snowflake...