40 matches found
spacesiren
SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...
CVE-2026-71216
PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...
EUVD-2026-70923
PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...
CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP
PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...
CVE-2026-71216
Apache SkyWalking (versions 9.6.0 through 11.0.0) is vulnerable to the cleartext transmission of sensitive information. The PagerDuty alarm hook transmits the integration routing key over unencrypted HTTP. Although PagerDuty serves this endpoint over HTTPS and provides a redirect for plain HTTP, ...
CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP
PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...
CVE-2026-71216: Cleartext Transmission of Sensitive Information
PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...
PT-2026-85427
PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...
GO-2026-5327 vulnerabilities
Vulnerabilities for packages: slsa-verifier, grafana-agent-operator, splunk-otel-collector, terraform-provider-pagerduty, bento, dapr, juicefs, consul-k8s, kubescape, teleport, ksops, tekton-chains, wal-g, kubescape-operator, opentelemetry-collector-contrib, promxy, trufflehog, cilium,...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: k3s, cosign, falco-no-driver, helm, nerdctl, scorecard, terraform-provider-pagerduty, kubernetes-dashboard-api, timoni, bento, croc, tfsec, thanos-operator, minio, osv-scanner, kubo, flux-image-automation-controller, src, flux-notification-controller, runc, bom,...
[SECURITY] Fedora 43 Update: alertmanager-0.33.0-1.fc43
The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...
[SECURITY] Fedora 44 Update: alertmanager-0.33.0-1.fc44
The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...
[SECURITY] Fedora 43 Update: alertmanager-0.31.1-2.fc43
The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...
[SECURITY] Fedora 42 Update: alertmanager-0.31.1-2.fc42
The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, scorecard, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, q, cerbos, tfsec, kubescape, ksops, witness, flux-image-automation-controller, pulumi-language-java, docker, wal-g, syft, guac, terraform-provider-azurerm,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: argocd-image-updater, scorecard, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, q, cerbos, tfsec, kubescape, ksops, witness, flux-image-automation-controller, pulumi-language-java, docker, wal-g, syft, guac, terraform-provider-azurerm,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: flux-source-controller-fips, crossplane-provider-aws-s3-fips, docker-cli-buildx, crossplane-provider-aws-iam, grafana-alloy, helm-push, src-fingerprint, flux-notification-controller-fips, crossplane-provider-aws-rds-fips, packer-fips, argo-cd,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-fips, skopeo-fips, gatus, crossplane-aws-provider, tetragon-fips, speedtest-go, nrdot-collector-k8s-fips, bank-vaults-fips, nvidia-nsight-compute-13.2, k8s-agents-operator-fips, flux-notification-controller-fips, kubecolor,...