MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise Pre-Auth RCE Lab Unauthenticated Arbitrary File Creation and Truncation via PostgreSQL Sidecar CVSS 9.8 · Critical · CWE-306 · Actively exploited CISA KEV ⚠️ Disclaimer This repository is intended strictly for educational and authorised security research purposes...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines, datadog-agent, az, kserve, ggshield, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, jupyter-base-notebook, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-katib, dask-kubernetes...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines, datadog-agent, az, kserve, ggshield, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, jupyter-base-notebook, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-katib, dask-kubernetes...

CLEANSTART-2026-PH11243 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels

Security vulnerability affects the k8s-sidecar package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels...

CLEANSTART-2026-MV63007 Security fix for ghsa-6v7p-g79w-8964 applied in: k8s-sidecar 2.10.3-r1

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XW51025 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

Security vulnerability affects the k8s-sidecar package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages...

CLEANSTART-2026-ZF37263 Security fix for CVE-2024-35195 applied in: k8s-sidecar 1.25.2-r0, py3-requests 2.32.3-r0, py3.14-requests 2.32.3-r0

CVE-2024-35195 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK32867 Security fix for CVE-2026-1703 applied in: k8s-sidecar 1.25.2-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r0, python3 3.11.14-r0, python3 3.12.12-r0

CVE-2026-1703 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RV30467 Security fix for CVE-2026-44431 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44431 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WH98389 Security fix for CVE-2026-44432 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, az 2.83.0-r1, az 2.84.0-r2, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, jupyterhub-k8s-hub 4.3.2-r3, jupyterhub-k8s-hub 4.3.3-r0, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, py3-jupyterhub 5.4.4-r0, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-44432 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UR98453 Security fix for ghsa-mf9v-mfxr-j63j applied in: airflow-3 3.1.8-r3, apache-superset 5.0.0-r7, cassandra-reaper-fips 3.6.1-r4, cassandra-reaper-fips 3.8.0-r7, cassandra-reaper-fips 4.0.1-r4, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, tensorflow-gpu-jupyter 2.21.0-r5

ghsa-mf9v-mfxr-j63j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TQ24260 Security fix for CVE-2024-47081 applied in: k8s-sidecar 1.25.2-r0

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BZ71423 Security fix for CVE-2025-8869 applied in: k8s-sidecar 1.25.2-r0

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TY96751 Security fix for ghsa-p423-j2cm-9vmq applied in: k8s-sidecar 1.25.2-r1

Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SE54902 Security fix for ghsa-jp4c-xjxw-mgf9 applied in: k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0

ghsa-jp4c-xjxw-mgf9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CS22541 Security fix for ghsa-65pc-fj4g-8rjx applied in: airflow-2 2.10.3-r2, airflow-2 2.11.0-r3, apache-superset 5.0.0-r7, apache-superset 6.0.0-r5, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, miniforge3 25.11.0.1-r2, miniforge3 26.1.0.0-r2, miniforge3 26.1.1.0-r1, tensorflow-gpu-jupyter 2.21.0-r5

ghsa-65pc-fj4g-8rjx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RR99050 Security fix for ghsa-58qw-9mgm-455v applied in: k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0

ghsa-58qw-9mgm-455v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZI04041 Security fix for CVE-2026-6357 applied in: k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, k8s-sidecar 2.7.1-r0, miniforge3 25.11.0.1-r1, miniforge3 26.1.0.0-r1, miniforge3 26.1.1.0-r0, python3 3.12.13-r0

CVE-2026-6357 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WY69230 Security fix for CVE-2026-45409 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.2.1-r3, apache-superset 5.0.0-r7, apache-superset 6.0.0-r5, az 2.83.0-r1, az 2.84.0-r2, k8s-sidecar 1.25.2-r1, k8s-sidecar 2.2.3-r0, k8s-sidecar 2.3.0-r0, k8s-sidecar 2.4.0-r0, k8s-sidecar 2.5.4-1, k8s-sidecar 2.5.5-r0, k8s-sidecar 2.6.0-r0, kserve-storage-controller 0.19.0-r0, miniforge3 25.11.0.1-r2, miniforge3 26.1.0.0-r2, miniforge3 26.1.1.0-r1, tensorflow-gpu-jupyter 2.21.0-r5

CVE-2026-45409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...