52 matches found
polaris
Polaris는 Kubernetes를 위한 오픈 소스 정책 엔진입니다 Polaris는 Kubernetes 리소스 구성을 검증하고 수정하는 오픈 소스 정책 엔진입니다. 30개 이상의 내장 구성 정책과 JSON Schema를 사용한 사용자 정의 정책 작성 기능을 제공합니다. 명령줄 또는 뮤테이팅 웹훅으로 실행 시 Polaris는 정책 기준에 따라 문제를 자동으로 수정할 수 있습니다. Polaris는 세 가지 모드로 실행할 수 있습니다: 대시보드로 - 정책-코드 방식으로 Kubernetes 리소스를 검증합니다. 어드미션 컨트롤러로 ...
mojarra-2.2.13-patched
Mojarra 2.2.13 – CVE-2020-6950 백포트 이 저장소는 CVE-2020-6950 에 대한 수정 사항을 Mojarra 2.2.13 에 백포트한 재현 가능한 버전을 포함합니다. 이 저장소는 주로 추적 가능성과 호환성 문제로 인해 최신 JSF/Mojarra 릴리스로 단순히 업그레이드할 수 없는 레거시 애플리케이션을 유지 관리하기 위해 존재합니다. 크레딧 및 업스트림 소스 Mojarra Mojarra는 JavaServer FacesJSF의 참조 구현으로, 원래 GlassFish/Java EE 생태계의 일부로...
CVE-2026-13260
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
EUVD-2026-78080
IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...
CVE-2026-82739: Generation of Error Message Containing Sensitive Information
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in lib/ash/resource/validation/confirm.ex...
CVE-2026-78385
RansomLook contains an insufficient resource validation flaw in its analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and rendered via WeasyPrint . Prior to the fix, WeasyPrint's default URL fetcher resolved resource references without restrictions, all...
CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access
RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...
PT-2026-80892
RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...
CVE-2026-72410 octeontx2-af: Validate NIX maximum LFs correctly
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is...
NPM: Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type
NPM: Flowise: DELETE /api/v1/chatflows/:id does not validate resource type, allowing agentflows:delete and chatflows:delete to delete each other’s flow type vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2026-1933)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1933 advisory. The tarfile module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result ...
Medium: python3.9
Issue Overview: The "tarfile" module would still apply normalization of AREGTYPE \x00 blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPELONGNAME or GNUTYPELONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other...
CVE-2026-54030
CVE-2026-54030 affects LibreChat (MCP OAuth flow). Before v0.8.5, the OAuth Protected Resource metadata’s resource parameter is not validated against the MCP server URL, enabling a malicious MCP server to steal access tokens intended for a legitimate server. Affected version range includes pre-0....
CVE-2026-46261
CVE-2026-46261 relates to the Linux kernel wpcm-fiu SPI driver. The issue is a potential NULL pointer dereference when platform_get_resource_byname() returns NULL, if the NULL is dereferenced by resource_size(). The patch moves the fiu->memory_size assignment to occur after the error check for...
CVE-2026-1402 Allocation of Resources Without Limits or Throttling in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed an authenticated user to cause denial of service due to insufficient validation...
CVE-2026-42515
This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system...
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
A flaw was found in Python's pkgutil.getdata function, which is used to retrieve data from packages. This function did not properly validate the resource argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories store...
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
A flaw was found in Python's pkgutil.getdata function, which is used to retrieve data from packages. This function did not properly validate the resource argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories store...
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
A flaw was found in Python's pkgutil.getdata function, which is used to retrieve data from packages. This function did not properly validate the resource argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories store...