Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguarded toString calls. It covers two related coercion points that were not caught by the original patch. Traversable in join and replace filters. SandboxExtension::ensureToStringAllowed...

GHSA-8X9C-RMQH-456C Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguarded toString calls. It covers two related coercion points that were not caught by the original patch. Traversable in join and replace filters. SandboxExtension::ensureToStringAllowed...

Security Bulletin: NVIDIA Container Toolkit - June 2026

NVIDIA has released a software update for NVIDIA® Container Toolkit. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation. Go to NVIDIA Product Security. Details The following table summarizes the potential...

Incorrect Authorization

Overview mythic is an Interact with Mythic C2 Framework Instances Affected versions of this package are vulnerable to Incorrect Authorization due to a broken permission filter in the payloadbuildstep table, which uses an always-satisfied or condition that bypasses operation-scoped access controls...

Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token | Field | Value || ---------------- | ----- || Repository | pipeboard-co/meta-ads-mcp || Affected version | ≤ 1.0.101 commit 496c988 7d14226; Versions 1.0.102–1.0.105 lack git tags, so patch status is unconfirmed. ||...

PYSEC-2026-413 Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token | Field | Value | | ---------------- | ----- | | Repository | pipeboard-co/meta-ads-mcp | | Affected version | ≤ 1.0.101 commit 496c988 7d14226; Versions 1.0.102–1.0.105 lack git tags, so patch status is unconfirmed. | |...

PT-2026-53495

Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token | Field | Value | | ---------------- | ----- | | Repository | pipeboard-co/meta-ads-mcp | | Affected version | ≤ 1.0.101 commit 496c988 7d14226; Versions 1.0.102–1.0.105 lack git tags, so patch status is unconfirmed. | |...

Continuous-Variable Source-Independent Quantum Random Number Generation with General POVMs

Continuous-variable source-independent quantum random number generators offer the highest generation rates among semi-device-independent protocols. In reality, the protocol design is limited due to permissible measurement configurations. In this work, we propose a rigorous security proof framewor...

CVE-2026-46604 vulnerabilities

Vulnerabilities for packages: hugo, seaweedfs-operator, gitlab-workhorse-ce, seaweedfs, seaweedfs-fips, mattermost, rclone-fips, seaweedfs-operator-fips, mattermost-fips, listmonk, rclone...

GHSA-QVQC-4C52-X6QP vulnerabilities

Vulnerabilities for packages: gpu-operator, kube-arangodb, kube-arangodb-fips, guac, gpu-operator-fips...

CVE-2026-49349 vulnerabilities

Vulnerabilities for packages: gpu-operator, kube-arangodb, kube-arangodb-fips, guac, gpu-operator-fips...

Authorization Bypass

Apache Camel is vulnerable to Authorization Bypass. The vulnerability is due to insufficient validation of user-controlled Build resources, which allows an authorized attacker to generate Pods in arbitrary Kubernetes namespaces, including the operator namespace...

SUSE CVE-2026-47770

jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface, resulting in denial of service via stack exhaustion uncontrolled recursion. The crash occurs in jq's recursive...

Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

Summary The web UI /ui/ does not apply the per-operator CA scoping the JSON API received for GHSA-598g-h2vc-h5vg. Any authenticated non-admin operator for example, one created via self-registration or OIDC can access resources belonging to other operators. Impact A non-admin operator can: - Block...

GHSA-C6V2-3FFM-VCMC Nebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)

Summary The web UI /ui/ does not apply the per-operator CA scoping the JSON API received for GHSA-598g-h2vc-h5vg. Any authenticated non-admin operator for example, one created via self-registration or OIDC can access resources belonging to other operators. Impact A non-admin operator can: - Block...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.3.3. Vulnerability Details CVEID:CVE-2026-45447 DESCRIPTION: Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: tigera-operator, skaffold, cloud-provider-aws, knative-kafka-broker, frankenphp-8.2, external-secrets-operator-fips, calico-fips, frankenphp-8.4, gatekeeper-fips, kuma, argo-workflows, prometheus-mongodb-exporter, vault-fips, chisel, argo-workflows-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: nuclei, tigera-operator, chainctl-fips, grype, skaffold, cloud-provider-aws, knative-kafka-broker, argo-events, frankenphp-8.2, external-secrets-operator-fips, pulumi, chainloop-cli, calico-fips, frankenphp-8.4, podman, gatekeeper-fips, chainloop-cli-fips, kuma,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-resources, glab, tigera-operator, chainctl-fips, crossplane, grype, skaffold, ollama-fips, terraform-provider-tls-fips, step, juicefs, cloud-provider-aws, knative-kafka-broker, crossplane-provider-azure-storagecache, argo-events,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: glab, crossplane-provider-aws-wafv2-fips, chainctl-fips, ollama-fips, crossplane-provider-aws-acm, crossplane-provider-aws-elb, crossplane-provider-aws-guardduty, cloud-provider-aws, kueue-fips, crossplane-provider-azure-storagecache,...