spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

CVE-2026-71216

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

EUVD-2026-70923

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216

Apache SkyWalking (versions 9.6.0 through 11.0.0) is vulnerable to the cleartext transmission of sensitive information. The PagerDuty alarm hook transmits the integration routing key over unencrypted HTTP. Although PagerDuty serves this endpoint over HTTPS and provides a redirect for plain HTTP, ...

CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216: Cleartext Transmission of Sensitive Information

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

PT-2026-85427

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: slsa-verifier, grafana-agent-operator, splunk-otel-collector, terraform-provider-pagerduty, bento, dapr, juicefs, consul-k8s, kubescape, teleport, ksops, tekton-chains, wal-g, kubescape-operator, opentelemetry-collector-contrib, promxy, trufflehog, cilium,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: k3s, cosign, falco-no-driver, helm, nerdctl, scorecard, terraform-provider-pagerduty, kubernetes-dashboard-api, timoni, bento, croc, tfsec, thanos-operator, minio, osv-scanner, kubo, flux-image-automation-controller, src, flux-notification-controller, runc, bom,...

[SECURITY] Fedora 43 Update: alertmanager-0.33.0-1.fc43

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

[SECURITY] Fedora 44 Update: alertmanager-0.33.0-1.fc44

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...

[SECURITY] Fedora 43 Update: alertmanager-0.31.1-2.fc43

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

[SECURITY] Fedora 42 Update: alertmanager-0.31.1-2.fc42

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, scorecard, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, q, cerbos, tfsec, kubescape, ksops, witness, flux-image-automation-controller, pulumi-language-java, docker, wal-g, syft, guac, terraform-provider-azurerm,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: argocd-image-updater, scorecard, nuclei, pulumi-language-dotnet, crossplane-provider-aws-elasticache, openbao, q, cerbos, tfsec, kubescape, ksops, witness, flux-image-automation-controller, pulumi-language-java, docker, wal-g, syft, guac, terraform-provider-azurerm,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, crossplane-provider-aws-s3-fips, docker-cli-buildx, crossplane-provider-aws-iam, grafana-alloy, helm-push, src-fingerprint, flux-notification-controller-fips, crossplane-provider-aws-rds-fips, packer-fips, argo-cd,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-fips, skopeo-fips, gatus, crossplane-aws-provider, tetragon-fips, speedtest-go, nrdot-collector-k8s-fips, bank-vaults-fips, nvidia-nsight-compute-13.2, k8s-agents-operator-fips, flux-notification-controller-fips, kubecolor,...