61721 matches found
CVE-2025-12755: Improper Output Neutralization for Logs
IBM MQ Operator SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29 and IBM‑supplied MQ Advanced container images across affected SC2, CD, and LTS 9.3.x–9.4.x releases contain a vulnerability where log messages are not properly neutralized before being written to log files. This flaw could allow an unauthorized...
PT-2026-22356
Summary The gateway WebSocket connect handshake could allow skipping device identity checks when auth.token was present but not yet validated. Details In src/gateway/server/ws-connection/message-handler.ts, the device-identity requirement could be bypassed based on the presence of a non-empty...
PT-2026-20223
IBM MQ Operator SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29 and IBM‑supplied MQ Advanced container images across affected SC2, CD, and LTS 9.3.x–9.4.x releases contain a vulnerability where log messages are not properly neutralized before being written to log files. This flaw could allow an unauthorized...
PT-2026-20338
Name of the Vulnerable Software and Affected Versions emp3r0r versions prior to 3.21.2 Description The software accesses multiple shared maps without consistent synchronization across goroutines. Concurrent activity can trigger a fatal error: concurrent map read and map write, leading to a C2...
CVE-2026-25765 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, cinc-auditor, kube-logging-operator, logstash...
GHSA-33MH-2634-FWR2 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, cinc-auditor, kube-logging-operator, logstash...
CVE-2026-25765 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, kube-fluentd-operator, cinc-auditor, gitlab-cng, kube-logging-operator, logstash, gitlab-rails-ce...
GHSA-33MH-2634-FWR2 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, kube-fluentd-operator, cinc-auditor, gitlab-cng, kube-logging-operator, logstash, gitlab-rails-ce...
GHSA-W4GW-W5JQ-G9JH vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, k3s, terraform, k8s-device-plugin, gendesk, rke2-runtime, kube-conformance, runc, gitlab-rails-ce, aws-load-balancer-controller, rke2-runtime-fips, wuzz, etcd-fips, gitness, backup-restore-operator, etcd, localstack, cilium-envoy-fips,...
CLEANSTART-2026-TR92727 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...
Multiple security vulnerabilities affect the prometheus-operator-fips package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should ha...
CLEANSTART-2026-CA79883 Security fixes for GHSA-6V2P-P943-PHR9, GHSA-C6GW-W398-HV78, GHSA-F6X5-JH6R-WRFV, GHSA-HCG3-P754-CR77, GHSA-J5W8-Q4QC-RX2X, GHSA-QXP5-GW88-XV66, GHSA-V778-237X-GJRC, GHSA-VVGC-356P-C3XW applied in versions: 1.15.0-r1
Multiple security vulnerabilities affect the rabbitmq-messaging-topology-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-21473
Multiple security vulnerabilities affect the rabbitmq-messaging-topology-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
Arbitrary Command Injection
Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the interpolation of untrusted agent metadata into tmux shell command strings executed through /bin/sh -c. An attacker can execute arbitrary commands on the operator host by supplying crafted metadata...
CVE-2026-2360
CVE-2026-2360 affects PostgreSQL Anonymizer. A vulnerability lets a user gain superuser privileges by creating a custom operator in the public schema, placing malicious code there, which is executed with superuser rights when the extension is created. Risk is higher on PostgreSQL 14 or when upgra...
CVE-2026-2360
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is...
CVE-2026-2360 Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is...
PT-2026-7633
Name of the Vulnerable Software and Affected Versions PostgreSQL Anonymizer versions prior to 3.0.1 Description The software contains a flaw that could allow a user to obtain superuser privileges. This is achieved by creating a custom operator within the public schema and embedding malicious code...
CVE-2026-2360: Uncontrolled Search Path Element
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the extension is created. The risk is...
GHSA-37CX-329C-33X3 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kubescape, zarf, gitlab-runner, gomplate, gitaly, apko, trivy-operator, teleport, pulumi-kubernetes-operator, pulumi, nfpm, gitea, kargo, xeol, nuclei, chezmoi, trivy, cerbos, kubevela, goreleaser, k9s, gptscript, flux-kustomize-controller, gryp...
CVE-2026-25934 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kubescape, zarf, gitlab-runner, gomplate, gitaly, apko, trivy-operator, teleport, pulumi-kubernetes-operator, pulumi, nfpm, gitea, kargo, xeol, nuclei, chezmoi, trivy, cerbos, kubevela, goreleaser, k9s, gptscript, flux-kustomize-controller, gryp...