1013 matches found
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: cluster-api, descheduler, istio, kyverno-notation-aws, gatekeeper, tkn, gitlab-kas, cluster-api-helm-controller, azure-service-operator, rancher-webhook, cass-operator, external-secrets-operator, kubernetes-csi-external-attacher, spicedb-operator, rke2-cloud-provider...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: openfga-fips, openfga, flux-operator, kgateway, ceph-csi-operator, omnictl-multiarch-fips, image-factory-fips, cluster-api-helm-controller-fips, kcp, kube-state-metrics-fips, node-feature-discovery-fips, kubernetes-csi-external-attacher, multicluster-controlplane-fip...
OESA-2026-3116 pipewire security update
is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return.CVE-2026-14324...
GHSA-HRXH-6V49-42GF vulnerabilities
Vulnerabilities for packages: kafka-proxy-fips, virt-operator-fips, pgtimetable-fips, crossplane-provider-aws-licensemanager-fips, hydra, step-ca-fips, crossplane-provider-aws-dax-fips, nifikop-fips, falcosidekick, crossplane-provider-aws-qldb, headlamp-fips, metallb, kubevirt-cdi-uploadserver,...
CVE-2026-13060
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
UBUNTU-CVE-2026-13060
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
CVE-2026-13060 $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
EUVD-2026-47774
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
CVE-2026-13060
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
CVE-2026-13060
Technical details are not publicly available in the provided documents. The supplied materials do not specify affected products/components, root cause, or remediation. Monitor for updates.
EUVD-2026-47783
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...
PT-2026-63464
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
EUVD-2026-46389
Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...
CVE-2026-47237
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
GHSA-V422-HMWV-36X6 vulnerabilities
Vulnerabilities for packages: tileserver-gl, kubeflow-pipelines, kubeflow-centraldashboard, sqlpad, langfuse, argo-workflows, json-server...
CVE-2026-12590 vulnerabilities
Vulnerabilities for packages: tileserver-gl, kubeflow-pipelines, kubeflow-centraldashboard, sqlpad, langfuse, argo-workflows, json-server...
CVE-2026-56144
Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...
CVE-2026-56144
Technical details about CVE-2026-56144 are not publicly provided in the supplied documents; no affected products, versions, or fixes are specified here. Monitor for updates in connected sources.
PT-2026-62092
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Insufficient authorization controls in the ingest simulation feature allow an authenticated user with limited index privileges to target indices they are not authorized to access...