GHSA-9JRQ-W75R-8GCW vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

GHSA-RQ7H-C2JC-7F22 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

gitoops

GitOops! 😱 all paths lead to clouds GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/...

EUVD-2026-108537

Improper neutralization of special elements used in a command 'command injection' in Azure Pipelines allows an unauthorized attacker to execute code over a network...

CVE-2026-105014

Improper neutralization of special elements used in a command 'command injection' in Azure Pipelines allows an unauthorized attacker to execute code over a network...

CVE-2026-105014

The Azure Pipelines service is vulnerable to a command injection flaw caused by the improper neutralization of special elements used in a command. This vulnerability allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CRITICAL base severity score of 9...

Azure Pipelines Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Pipelines allows an unauthorized attacker to execute code over a network...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, langfuse-fips, gitlab-rails-ce, configurable-http-proxy, langfuse, opensearch-dashboards-fips, prism, semaphore, code-server, azurite, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, kibana, redisinsight, lambda-nodejs, wazuh-dashboard-fip...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, langfuse-fips, gitlab-rails-ce, configurable-http-proxy, langfuse, opensearch-dashboards-fips, prism, semaphore, code-server, azurite, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, kibana, redisinsight, lambda-nodejs, wazuh-dashboard-fip...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, langfuse-fips, gitlab-rails-ce, configurable-http-proxy, langfuse, opensearch-dashboards-fips, prism, semaphore, code-server, azurite, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, kibana, redisinsight, lambda-nodejs, wazuh-dashboard-fip...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, langfuse-fips, gitlab-rails-ce, configurable-http-proxy, langfuse, opensearch-dashboards-fips, prism, semaphore, code-server, azurite, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, kibana, redisinsight, lambda-nodejs, wazuh-dashboard-fip...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, prism, langfuse, code-server, nextcloud-server, lerna, configurable-http-proxy, kubeflow-pipelines...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, prism, langfuse, code-server, nextcloud-server, lerna, configurable-http-proxy, kubeflow-pipelines...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, prism, langfuse, code-server, nextcloud-server, lerna, configurable-http-proxy, kubeflow-pipelines...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, prism, langfuse, code-server, nextcloud-server, lerna, configurable-http-proxy, kubeflow-pipelines...

Linux Distros Unpatched Vulnerability : CVE-2026-16301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-81839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-14814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...

CVE-2026-111672

Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/viewpipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipeline ids via the web, log, monitoring, pod, and copypipeline...