842 matches found
GHSA-J5F8-GRM9-P9FC vulnerabilities
Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards, awx, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards-fips...
GHSA-777C-7FJR-54VF vulnerabilities
Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards, awx, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards-fips...
CVE-2026-44488 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards, awx, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards-fips...
CVE-2026-44487 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards, awx, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards-fips...
CVE-2026-43826
The OpenSearch logging provider, when configured with a host URL that embeds credentials for example https://user:[email protected]:9200, wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend...
GHSA-298W-VVM4-WW55 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-298W-VVM4-WW55 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards...
Malicious Package
Overview opensearch-setup-tool is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
Malicious Package
Overview opensearch-security-scanner is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between tho...
Malicious Package
Overview opensearch-config-utility is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
Typosquatted npm packages used to steal cloud and CI/CD secrets
In this article 1. Attack chain overview 1. The lure: typosquats and spoofed metadata 2. Execution: npm lifecycle hook abuse 3. Gen-1 stager: HTTP C2 beacon and payload drop 4. Gen-2 stager: abusing the legitimate Bun runtime as a loader 5. Credential theft 6. Impact and blast radius 2. Mitigatio...
ROS-20260529-73-0023
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0024
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0021
The vulnerability in opensearch relates to the use of a name with an incorrect link. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
ROS-20260529-73-0022
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0002
The vulnerability in opensearch relates to the use of a name with an incorrect link. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
ROS-20260529-73-0001
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2024-53382 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...