spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

CVE-2026-71216

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

EUVD-2026-70923

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216

Apache SkyWalking (versions 9.6.0 through 11.0.0 ) contains a vulnerability in its PagerDuty alarm hook , which transmits the integration routing key over cleartext HTTP . Although PagerDuty normally serves its endpoint over HTTPS and responds to plain HTTP with a redirect, the initial POST—inclu...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: wal-g, ksops, external-secrets-operator, cortex, bento, grafana, grafana-agent-operator, weaviate, amazon-cloudwatch-agent, juicefs, migrate, promxy, terraform-provider-pagerduty, datadog-agent, grafana-pyroscope, tekton-chains, opentelemetry-collector-contrib,...

GO-2026-4342 vulnerabilities

Vulnerabilities for packages: eksctl, rancher-helm, gitness, helm-set-status, goreleaser, kubernetes-dashboard-api, aactl, osv-scanner, kubo, flux-image-automation-controller, headlamp, fuse-overlayfs-snapshotter, bento, aws-flb-cloudwatch, aws-flb-kinesis, xeol, external-dns, redka,...

[SECURITY] Fedora 43 Update: alertmanager-0.33.0-1.fc43

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

[SECURITY] Fedora 44 Update: alertmanager-0.33.0-1.fc44

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: omnibump, rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, redka, crane, aws-s3-controller, rancher-fleet, cerbos, swagger, hugo-extended, filebrowser,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: omnibump, rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, redka, crane, aws-s3-controller, rancher-fleet, cerbos, swagger, hugo-extended, filebrowser,...

[SECURITY] Fedora 43 Update: alertmanager-0.31.1-2.fc43

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

[SECURITY] Fedora 42 Update: alertmanager-0.31.1-2.fc42

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It a lso takes care of silencing and inhibition of alerts...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: ksops, wolfictl, goreleaser, policy-controller, flux-image-automation-controller, dagger, extism, rancher-fleet, cerbos, helm-push, crossplane-provider-aws-cloudfront, hydra, tfsec, kyverno-notation-aws, flux-notification-controller, kubescape, kots, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: ksops, wolfictl, goreleaser, policy-controller, flux-image-automation-controller, dagger, extism, rancher-fleet, cerbos, helm-push, crossplane-provider-aws-cloudfront, hydra, tfsec, kyverno-notation-aws, flux-notification-controller, kubescape, kots, witness,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, terraform-provider-azurerm, tekton-pipelines-fips, amazon-ssm-agent-fips, k9s, snyk-cli, pulumi-language-java, crossplane-provider-aws-memorydb-fips, crossplane-provider-azure-managedidentity, ratify-fips, crossplane-provider-aws-sns,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: longhorn-instance-manager, cluster-autoscaler-fips, velero-plugin-for-aws-fips, dragonfly-operator, timoni, verticadb-operator-fips, mc-fips, terraform-provider-google, tkn, crossplane-provider-aws-memorydb-fips, crossplane-provider-azure-managedidentity, mkcert,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: longhorn-instance-manager, cluster-autoscaler-fips, velero-plugin-for-aws-fips, dragonfly-operator, timoni, verticadb-operator-fips, mc-fips, terraform-provider-google, tkn, crossplane-provider-aws-memorydb-fips, crossplane-provider-azure-managedidentity, mkcert,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: longhorn-instance-manager, cluster-autoscaler-fips, dragonfly-operator, timoni, verticadb-operator-fips, mc-fips, terraform-provider-google, tkn, crossplane-provider-aws-memorydb-fips, crossplane-provider-azure-managedidentity, dex-k8s-authenticator,...

CVE-2025-52493

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from...