1326 matches found
GHSA-JRC7-96C5-Q579 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-85061 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
Malcolm
Malcolm Malcolm è una potente suite di strumenti per l'analisi del traffico di rete, progettata con i seguenti obiettivi: Facile da usare – Malcolm accetta dati di traffico di rete sotto forma di file di cattura completa dei pacchetti PCAP, log Zeek e avvisi Suricata. Questi artefatti possono...
GHSA-343H-94H5-C4WR vulnerabilities
Vulnerabilities for packages: datahub-frontend, dd-trace-java, apache-nifi, pinot-fips, strimzi-kafka-operator-fips, sonarqube, conductor-fips, cruise-control-fips, elasticsearch, cassandra-fips, cruise-control, apache-polaris-fips, logstash-fips, akhq, datahub-gms, opensearch, apache-pulsar-fips...
CVE-2026-104850 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, langfuse-fips, commercial-gitlab-rails-ee-fips, langfuse, opensearch-dashboards, opensearch-dashboards-fips, kibana, commercial-gitlab-rails-ee...
GHSA-6QXP-VCCF-F47H vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, langfuse-fips, commercial-gitlab-rails-ee-fips, langfuse, opensearch-dashboards, opensearch-dashboards-fips, kibana, commercial-gitlab-rails-ee...
GHSA-WR44-6HXH-3JWQ vulnerabilities
Vulnerabilities for packages: thingsboard, opensearch-dashboards...
CVE-2026-90771 vulnerabilities
Vulnerabilities for packages: thingsboard, opensearch-dashboards...
GHSA-9325-VQ29-GP3V Backstage has incorrect authorization in search engine permission filtering
Impact An authenticated Backstage user subject to a DENY policy for search document types could receive search results they were not authorized to view. This affects deployments with permission.enabled: true and an Elasticsearch or OpenSearch search backend. Patches - Upgrade...
Backstage has incorrect authorization in search engine permission filtering
Impact An authenticated Backstage user subject to a DENY policy for search document types could receive search results they were not authorized to view. This affects deployments with permission.enabled: true and an Elasticsearch or OpenSearch search backend. Patches - Upgrade...
CVE-2026-106562
A flaw was found in Backstage search backend plugins. In deployments configured with permission enforcement and backed by an Elasticsearch or OpenSearch service, search engine filtering fails to properly apply document denial policies. An authenticated user can exploit this issue during search...
CVE-2026-106562
Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...
CVE-2026-106562 Backstage: Incorrect authorization in search engine permission filtering
Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...
CVE-2026-106562
The Backstage developer portal framework contains an incorrect authorization vulnerability in its search engine permission filtering. Specifically, in versions prior to 2.1.6 of @backstage/plugin-search-backend and 1.8.7 of @backstage/plugin-search-backend-module-elasticsearch, the system could r...
CVE-2026-90771 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, unleash, opensearch-dashboards, opensearch-dashboards-fips, thingsboard...
GHSA-WR44-6HXH-3JWQ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, unleash, opensearch-dashboards, opensearch-dashboards-fips, thingsboard...
PT-2026-107544
Name of the Vulnerable Software and Affected Versions @backstage/plugin-search-backend versions prior to 2.1.6 @backstage/plugin-search-backend-module-elasticsearch versions prior to 1.8.7 Description An authenticated user could receive unauthorized search results when a DENY policy is applied to...
CVE-2026-106562: Improper Check for Unusual or Exceptional Conditions
Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...