CVE-2025-53632

CVE-2025-53632 Este repositorio contiene un exploit de CVE-2025-53632 que afecta a Chall-Manager !WARNING La forma en que Chall-Manager maneja los escenarios sigue siendo completamente explotable sin el zip slip: simplemente altera el binario pulumi del escenario para que la próxima ejecución...

CLEANSTART-2026-WX98104 Security fix for CVE-2026-42338 applied in: opensearch-dashboards-fips 2.19.5-r0, proxy-agent 6.5.0-r0, pulumi 3.248.0-r0, renovate 43.123.8-r3, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1, sqlpad 7.5.7-r3

CVE-2026-42338 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IM94459 Security fix for CVE-2026-9358 applied in: npm 11.14.0-r3, pulumi 3.248.0-r0

CVE-2026-9358 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE92046 Security fix for CVE-2026-45149 applied in: npm 11.14.0-r0, pulumi 3.248.0-r0, renovate 44.31.0-r1, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-45149 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QG09964 Security fix for CVE-2026-5160 applied in: crossplane-provider-keycloak 2.22.1-r2, pulumi 3.248.0-r0

CVE-2026-5160 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PW61027 Security fix for CVE-2026-59877 applied in: langfuse 3.208.0-r1, n8n 2.28.0-r2, pulumi 3.248.0-r0

CVE-2026-59877 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SG26208 Security fix for CVE-2026-59892 applied in: n8n 2.28.0-r2, pulumi 3.248.0-r0

CVE-2026-59892 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FX79373 Security fix for CVE-2026-48816 applied in: pulumi 3.248.0-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-48816 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BS35481 Security fix for CVE-2026-48758 applied in: pulumi 3.248.0-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-48758 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AZ47953 Security fix for CVE-2026-48815 applied in: pulumi 3.248.0-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-48815 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VP69884 Security fix for CVE-2026-54285 applied in: pulumi 3.248.0-r0

Security vulnerability affects the pulumi package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-2883-XCG3-V3HH vulnerabilities

Vulnerabilities for packages: redisinsight, prism, foxx-cli, code-server, opensearch-dashboards-fips, authentik, pulumi, tensorflow-gpu-jupyter, unleash-proxy, sqlpad, mongod, gitlab-rails-ce-fips, opensearch-dashboards, vitess, awx, renovate, wazuh-dashboard-fips, kibana, argo-workflows, eslint,...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: redisinsight, prism, foxx-cli, code-server, opensearch-dashboards-fips, authentik, pulumi, tensorflow-gpu-jupyter, unleash-proxy, sqlpad, mongod, gitlab-rails-ce-fips, opensearch-dashboards, vitess, awx, renovate, wazuh-dashboard-fips, kibana, argo-workflows, eslint,...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: pulumi, sqlpad, lerna, ts-patch, opensearch-dashboards, renovate, eslint, code-server, prism, kubeflow-katib, vitess, argo-workflows...

GHSA-2883-XCG3-V3HH vulnerabilities

Vulnerabilities for packages: pulumi, sqlpad, lerna, ts-patch, opensearch-dashboards, renovate, eslint, code-server, prism, kubeflow-katib, vitess, argo-workflows...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: helm, longhorn-manager, podman-fips, gitea, gitness, amazon-ssm-agent, chainctl, argo-events-fips, grafana-fips, nuclei, frankenphp-8.5, pulumi-kubernetes-operator, wal-g-fips, semaphore, witness, kubescape-server-fips, cilium-cli, redpanda-console, longhorn-cli,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: helm, podman-fips, gitea, gitness, amazon-ssm-agent, chainctl, argo-events-fips, grafana-fips, nuclei, frankenphp-8.5, pulumi-kubernetes-operator, wal-g-fips, semaphore, witness, kubescape-server-fips, cilium-cli, redpanda-console, rclone, chisel, rancher-fleet, bent...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: helm, longhorn-manager, podman-fips, gitea, gitness, amazon-ssm-agent, chainctl, argo-events-fips, grafana-fips, nuclei, frankenphp-8.5, pulumi-kubernetes-operator, wal-g-fips, semaphore, witness, kubescape-server-fips, cilium-cli, redpanda-console, longhorn-cli,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: helm, podman-fips, gitea, gitness, amazon-ssm-agent, chainctl, argo-events-fips, grafana-fips, nuclei, frankenphp-8.5, pulumi-kubernetes-operator, wal-g-fips, semaphore, witness, kubescape-server-fips, cilium-cli, redpanda-console, rclone, chisel, rancher-fleet, bent...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, cerbos, minio, opentelemetry-collector, wal-g, melange, gh, rancher-agent, rancher-fleet, scorecard, k3s, kubernetes-dashboard, dagger, terraform, grafana-alloy, pulumi-kubernetes-operator, zot, seaweedfs, cilium, nfpm, argocd-image-updater,...