Mimir

Mimir Interfaccia OSINT per Threat Intelligence - Chiamata come l'antico dio norreno della conoscenza. Mimir funge da CLI per HoneyDB che in breve è un pool OSINT aggregativo di threat intelligence. Avviando il programma si accede a un menu le cui opzioni sono le seguenti. root@kitploit: 1. Fetch...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, kubeflow-pipelines, crossplane-provider-gcp, kyverno-fips, opa-fips, cert-exporter-fips, opa-envoy, nfs-subdir-external-provisioner, step, portieris, dgraph, kyverno, cluster-proportional-autoscaler, skaffold, step-issuer,...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: fulcio, rekor, prometheus-alertmanager, cortex, timestamp-authority, grafana-mimir...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: gomplate, kots, k8sgpt-operator, sops, k8sgpt, guac, osv-scanner, terraform-provider-google, opentelemetry-collector-contrib, ksops, grpc-health-probe, grafana-agent-operator, k3s, step, zarf, fulcio, kubernetes-csi-driver-hostpath, opa, certificate-transparency,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sops, k8sgpt, policy-controller, velero, guac, flux-kustomize-controller, sqlpad, wal-g, opentelemetry-collector-contrib, rekor, ksops, cosign, grafana-agent-operator, secrets-store-csi-driver-provider-azure, flyte, bank-vaults, argo-workflows, prometheus-operator,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: gomplate, sops, actions-runner-controller, policy-controller, guac, flux-kustomize-controller, crossplane-provider-azure-storage, slsa-verifier, crossplane-provider-azure-authorization, opentelemetry-collector-contrib, pulumi-kubernetes-operator, ksops, rekor, cosign...

SUSE CVE-2026-47671

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden nhost configserver used by nhost dev exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment...

CLEANSTART-2026-RY66554 Security fixes in grafana-mimir-fips 3.0.4-r1

Package grafana-mimir-fips version 3.0.4-r1 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-JG10359 Security fixes in grafana-mimir 3.0.2-r0

Package grafana-mimir version 3.0.2-r0 fixes 9 vulnerabilities: CVE-2025-68121, ghsa-9h8m-3fm2-qjrq, CVE-2025-61732, CVE-2026-24051, CVE-2026-25679...

CLEANSTART-2026-SP48916 Security fixes in grafana-mimir-fips 3.0.5-r1

Package grafana-mimir-fips version 3.0.5-r1 fixes 12 vulnerabilities: ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58, CVE-2026-39883, CVE-2026-39882, CVE-2026-27140...

CLEANSTART-2026-PK62931 Security fixes in grafana-mimir-fips 3.0.2-r1

Package grafana-mimir-fips version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-IS30019 Security fixes in grafana-mimir-fips 2.17.10-r0

Package grafana-mimir-fips version 2.17.10-r0 fixes 3 vulnerabilities: ghsa-w8rr-5gcm-pp58, CVE-2026-27141, CVE-2026-39882...

CLEANSTART-2026-PI73299 Security fixes in grafana-mimir 3.0.2-r1

Package grafana-mimir version 3.0.2-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QD77000 Security fixes in grafana-mimir-fips 3.0.2-r0

Package grafana-mimir-fips version 3.0.2-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2025-68121, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CVE-2026-47671

Nhost CLI prior to 1.46.0 exposes an unauthenticated, cross-origin-configurable configserver via nhost dev. The hidden configserver serves Mimir GraphQL with dummy authorization and permissive CORS (Access-Control-Allow-Origin: *). An attacker-controlled web page can reach localhost and perform q...

CVE-2026-47671 Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden nhost configserver used by nhost dev exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: vault-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-azure-spring, cluster-api-provider-vsphere, kuberay-operator-fips, crossplane-provider-aws-emrserverless, vcluster, crossplane, percona-backup-mongodb-fips, crossplane-provider-aws-memorydb-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: vault-fips, kubernetes-csi-external-resizer-fips, crossplane-provider-azure-spring, cluster-api-provider-vsphere, kuberay-operator-fips, crossplane-provider-aws-emrserverless, vcluster, crossplane, percona-backup-mongodb-fips, crossplane-provider-aws-memorydb-fips,...

PT-2026-46881

Name of the Vulnerable Software and Affected Versions Nhost CLI affected versions not specified Description The hidden configserver used by nhost dev exposes the Mimir GraphQL API with permissive CORS and dummy authorization directives. This allows any process capable of reaching the developer's...

CLEANSTART-2026-CY26398 Security fixes for CVE-2026-34986, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-w8rr-5gcm-pp58, ghsa-xmrv-pmrh-hhx2 applied in versions: 3.0.5-r0, 3.0.6-r0

Multiple security vulnerabilities affect the grafana-mimir-fips package. These issues are resolved in later releases. See references for individual vulnerability details...