61790 matches found
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-58016 DESCRIPTION: A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when processing...
CVE-2026-17617: Server-Side Request Forgery (SSRF)
IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of URLs specified in custom resources...
CVE-2026-71259: Incomplete List of Disallowed Inputs
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py. Because binds tighter than , any file: URI passes validation regardless of netloc. This validator gates the field of the externalcomponents YAML directive's git source schema,...
PT-2026-68224
Name of the Vulnerable Software and Affected Versions IBM Application Gateway Operator versions 22.2 through 26.06 Description Insufficient validation of URLs specified in custom resources allows for Server-Side Request Forgery SSRF, a condition where an attacker can induce the server to make...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: dagster, openstack-nova-2026.1, localstack, openstack-tempest-2026.1, dask-kubernetes, metaflow-service, semgrep, datadog-agent, mlflow, ansible-operator, dbt-bigquery, lmcache-cuda-12.8, opal, authentik, vllm-openai-cuda-12.9, kubeflow, dbt-snowflake,...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: dagster, openstack-nova-2026.1, localstack, openstack-tempest-2026.1, dask-kubernetes, metaflow-service, semgrep, datadog-agent, mlflow, ansible-operator, dbt-bigquery, lmcache-cuda-12.8, opal, authentik, vllm-openai-cuda-12.9, kubeflow, dbt-snowflake,...
CVE-2026-70484
Open WebUI vulnerability CVE-2026-70484 affects the self-hosted AI platform Open WebUI in versions 0.7.0 through 0.11.0. The legacy chat-completions features did not re-check the features.image_generation permission enforced on direct image routes and native function-calling paths, allowing an au...
CVE-2026-70484
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied imagegeneration flag and did not re-check the features.imagegeneration permission that the direct image routes and...
CVE-2026-70484 Open WebUI: Users denied the image-generation permission can still generate images via chat completions
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied imagegeneration flag and did not re-check the features.imagegeneration permission that the direct image routes and...
CVE-2026-70484 Open WebUI: Users denied the image-generation permission can still generate images via chat completions
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied imagegeneration flag and did not re-check the features.imagegeneration permission that the direct image routes and...
CVE-2026-70484 Open WebUI: Users denied the image-generation permission can still generate images via chat completions
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied imagegeneration flag and did not re-check the features.imagegeneration permission that the direct image routes and...
EUVD-2026-52889
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions features block trusted a client-supplied imagegeneration flag and did not re-check the features.imagegeneration permission that the direct image routes and...
GHSA-3769-JGQC-CXM7 Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
Summary A sandbox escape vulnerability in executeJavaScriptCode allows any authenticated user to execute arbitrary system commands as root on the Flowise server. The function accepts caller-provided nodeVMOptions that override the default sandbox security settings via JavaScript's spread operator...
CVE-2026-67618
marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious baseurl in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own setting...
CVE-2026-67618 marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata
marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious baseurl in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own setting...
EUVD-2026-52702
marimo before 0.23.15 contains a configuration injection vulnerability that allows notebook authors to exfiltrate operator API keys by embedding a malicious baseurl in PEP-723 inline script metadata, which is merged into session configuration with higher precedence than the operator's own setting...
CVE-2026-67618
The vulnerability CVE-2026-67618 affects marimo before version 0.23.15. It stems from insufficient sanitization in sanitize_pyproject_dict, allowing a notebook author to inject a malicious base_url via PEP-723 inline script metadata. The attacker-controlled base_url is merged into session configu...
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Summaryllm.chat reads the operator's provider key from the environment OPENAIAPIKEY, ANTHROPICAPIKEY, ... and sends it in the Authorization: Bearer header to baseurl, a parameter the caller controls. baseurl is only checked against the SSRF guard, and the guard allows any public host, so pointing...
PYSEC-2026-3573 Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Summary llm.chat reads the operator's provider key from the environment OPENAIAPIKEY, ANTHROPICAPIKEY, ... and sends it in the Authorization: Bearer header to baseurl, a parameter the caller controls. baseurl is only checked against the SSRF guard, and the guard allows any public host, so pointin...