1332 matches found
CVE-2026-44495 vulnerabilities
Vulnerabilities for packages: nextcloud-server, kubeflow-katib...
GHSA-777C-7FJR-54VF vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
CVE-2026-44488 vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
GHSA-HFXV-24RG-XRQF vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, arangodb, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
GHSA-P92Q-9VQR-4J8V vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, arangodb, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
CVE-2026-44486 vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, arangodb, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
CVE-2026-44487 vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, arangodb, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
CVE-2026-44496 vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, arangodb, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
GHSA-J5F8-GRM9-P9FC vulnerabilities
Vulnerabilities for packages: awx, kubeflow-katib, opensearch-dashboards, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, arangodb, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips...
CVE-2026-43826
The OpenSearch logging provider, when configured with a host URL that embeds credentials for example https://user:[email protected]:9200, wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend...
GHSA-298W-VVM4-WW55 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-298W-VVM4-WW55 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips, opensearch-dashboards-fips...
Malicious Package
Overview opensearch-security-scanner is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between tho...
Malicious Package
Overview opensearch-setup-tool is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
Malicious Package
Overview opensearch-config-utility is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...
Typosquatted npm packages used to steal cloud and CI/CD secrets
In this article 1. Attack chain overview 1. The lure: typosquats and spoofed metadata 2. Execution: npm lifecycle hook abuse 3. Gen-1 stager: HTTP C2 beacon and payload drop 4. Gen-2 stager: abusing the legitimate Bun runtime as a loader 5. Credential theft 6. Impact and blast radius 2. Mitigatio...
ROS-20260529-73-0023
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260529-73-0024
The vulnerability in opensearch is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...