2248 matches found
PT-2026-114108
Name of the Vulnerable Software and Affected Versions OpenClaw ClawScan versions prior to 0.1.7 Description A flaw in the Static Scanner component allows a local attacker to cause a protection mechanism failure. This issue occurs within the shouldSkipTargetPath function located in the...
iac-scan-runner
IaC Scan Runner Servicio que escanea tu Infraestructura como Código en busca de vulnerabilidades comunes. Aspecto| Información ---|--- Nombre de la herramienta| IaC Scan Runner Imagen Docker| xscanner/runner Paquete PyPI| iac-scan-runner Documentación| docs Contáctanos| [email protected]...
LeitWacht
GitLab Runner Leitwacht Control de salida de red para contenedores CI/CD de GitLab Runner. Leitwacht previene ataques a la cadena de suministro que exfiltran secretos, controlando lo que cada contenedor de trabajo puede acceder en la red. Cómo Funciona Leitwacht es un agente independiente que se...
GO-2026-6613 vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, cluster-api-gcp-controller, timestamp-authority, cluster-api, cloud-sql-proxy, aws-application-networking-k8s, continuity, etcd, istio, osv-scanner, grafana-pyroscope, azure-service-operator, crossplane-provider-aws-sns, grafana-mimir,...
GHSA-874M-FCC5-9GQF vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, cluster-api-gcp-controller, timestamp-authority, cluster-api, cloud-sql-proxy, aws-application-networking-k8s, continuity, etcd, istio, osv-scanner, grafana-pyroscope, azure-service-operator, crossplane-provider-aws-sns, grafana-mimir,...
CVE-2026-94440 vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, cluster-api-gcp-controller, timestamp-authority, cluster-api, cloud-sql-proxy, aws-application-networking-k8s, continuity, etcd, istio, osv-scanner, grafana-pyroscope, azure-service-operator, crossplane-provider-aws-sns, grafana-mimir,...
GO-2026-6607 vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, cluster-api-gcp-controller, timestamp-authority, cluster-api, cloud-sql-proxy, aws-application-networking-k8s, continuity, etcd, istio, osv-scanner, grafana-pyroscope, azure-service-operator, crossplane-provider-aws-sns, grafana-mimir,...
CVE-2026-94439 vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, cluster-api-gcp-controller, timestamp-authority, cluster-api, cloud-sql-proxy, aws-application-networking-k8s, continuity, etcd, istio, osv-scanner, grafana-pyroscope, azure-service-operator, crossplane-provider-aws-sns, grafana-mimir,...
GO-2026-6605 vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, cluster-api-gcp-controller, timestamp-authority, cluster-api, cloud-sql-proxy, aws-application-networking-k8s, continuity, etcd, istio, osv-scanner, grafana-pyroscope, azure-service-operator, crossplane-provider-aws-sns, grafana-mimir,...
CVE-2026-97031 vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, cluster-api-gcp-controller, timestamp-authority, cluster-api, cloud-sql-proxy, aws-application-networking-k8s, continuity, etcd, istio, osv-scanner, grafana-pyroscope, azure-service-operator, crossplane-provider-aws-sns, grafana-mimir,...
Exploit for Server-Side Request Forgery in Apache Ofbiz
Apache OFBiz Authentication Bypass to RCE CVE-2023-51467 V...
connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (53.4.0)
weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...
GO-2026-6656 gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled in gitea.com/gitea/runner
gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled in gitea.com/gitea/runner...
GHSA-RJ75-HQRM-R3GF vulnerabilities
Vulnerabilities for packages: arangodb, commercial-gitlab-rails-ee, vitess, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, pulumi, jupyter-base-notebook, renovate, langfuse, graalvm, gitlab-rails-ce, librechat, actions-runner, langfuse-fips, node-red, npm...
CVE-2026-104844 vulnerabilities
Vulnerabilities for packages: arangodb, commercial-gitlab-rails-ee, vitess, commercial-gitlab-rails-ee-fips, gitlab-rails-ce-fips, pulumi, jupyter-base-notebook, renovate, langfuse, graalvm, gitlab-rails-ce, librechat, actions-runner, langfuse-fips, node-red, npm...
CVE-2026-104632
Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...
CVE-2026-104632 Gitea fork workflow approval bypass through cancel and rerun
Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished and built the new attempt's jobs without considering the pending approval, so when a user with Actions write access...
GHSA-X4Q3-GCJ3-M6CF gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled
Summary actrunner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML ar...
gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled
Summary actrunner appends workflow-controlled jobs..container.options directly to the Docker HostConfig for the job container. When runner privileged mode is disabled, only Privileged is forced false. Host namespace flags, capability expansion, and security profile overrides from workflow YAML ar...
CVE-2026-80443 Insecure TLS Certificate Validation in API Tool Runner in HAVELSAN's Sef - AI Chatbot Platform
Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle AiTM. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not supported...