Fission 访问控制错误漏洞

Fission is an open-source function deployment framework based on Kubernetes. Versions of Fission prior to 1.24.0 contained a access control vulnerability. This vulnerability allowed low-privilege developers to create KubernetesWatchTriggers within their own namespaces, enabling them to establish...

crawlee 代码问题漏洞

Crawlee is an open-source web scraping and browser automation library developed by Apify. Versions of Crawlee from 1.0.0 to 1.7.0 had code vulnerabilities. These vulnerabilities stemmed from URLs generated using site maps, which could lead to server-side request forgeing attacks...

PI-Hunter: Automated Red-Teaming for Exposing and Localizing Prompt Injections

Large Language Models LLMs are rapidly evolving into agentic systems that interact with external tools and environments, introducing new security risks such as indirect prompt injection attacks through untrusted external sources. Existing defenses mainly focus on blocking malicious content at...

PT-2026-48513

Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.25.0 Description Fission is a Kubernetes-native serverless framework. The SanitizeFilePath function in pkg/utils/utils.go performs a lexical check using strings.HasPrefixpath, safedir to ensure a path remains within...

PT-2026-48444

Name of the Vulnerable Software and Affected Versions migration-planner affected versions not specified Description An improper access control flaw exists in the '/api/v1/sources/id/image-url' endpoint. An authenticated attacker can bypass ownership checks to obtain presigned S3 URLs for Open...

PT-2026-48514

Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.25.0 Description Fission is a Kubernetes-native serverless framework. A flaw exists where the HTTPTriggerSpec.Validate function fails to validate the RelativeURL and Prefix variables, while only validating Methods,...

Erlang/OTP 信息泄露漏洞

Erlang/OTP is an open-source JavaScript library for handling exceptions. This library can catch exceptions caused by Node.js’s built-in APIs. Erlang/OTP versions 3.0.1 to 6.0.1, 5.5.2.1, and 5.2.11.8 have a vulnerability known as information leakage. This vulnerability stems from the SSHFXPREADLI...

PT-2026-48503

Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.24.0 Description Fission is an open-source, Kubernetes-native serverless framework used for deploying functions and applications on Kubernetes. The buildermgr controller processes Package Custom Resource Definitions...

PT-2026-48512

Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.25.0 Description Fission is a Kubernetes-native serverless framework. The Unarchive function in pkg/utils/zip.go fails to validate if the resolved path of an archive entry remains within the destination directory wh...

Can Open-Source LLM Agents Replace Static Application Security Testing Tools? an Empirical Assessment

This paper explores the value of agentic AI tools for cybersecurity purposes. We evaluate the efficacy of a general-purpose GenAI Large Language Model- GenAI- based agent when powered by three different Ollama-hosted general-purpose open source models. We assess each agent's performance using...

GHSA-55HG-8QXV-QJ4P

creationtimestamp| type| source ---|---|--- 2026-06-09 23:41:37+00:00| seen| https://gist.github.com/alon710/8fd39736c139424c0b6f1dacb91f586a...

CVE-2026-47955

creationtimestamp| type| source ---|---|--- 2026-06-09 23:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvchp5ryl2u...

CVE-2026-34713

creationtimestamp| type| source ---|---|--- 2026-06-09 23:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvcg34ysg2n...

CVE-2026-34711

creationtimestamp| type| source ---|---|--- 2026-06-09 23:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvcflawlb2n 2026-06-10 02:03:22+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnvmmyg4nr2a...

GHSA-MRHX-6PW9-Q5FH

creationtimestamp| type| source ---|---|--- 2026-06-09 22:51:34+00:00| seen| https://gist.github.com/alon710/f640ae703fe7932b0c10bae26e654477...

CVE-2026-47930

creationtimestamp| type| source ---|---|--- 2026-06-09 22:27:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvaketsgc2v 2026-06-10 09:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdxh5ab625 2026-06-15 19:37:06+00:00| seen|...

CVE-2026-47938

creationtimestamp| type| source ---|---|--- 2026-06-09 22:17:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv7yh5zg627 2026-06-10 07:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnw5bdy7s42s 2026-07-05 01:00:01+00:00| seen|...

CVE-2026-36934

creationtimestamp| type| source ---|---|--- 2026-06-09 22:15:53+00:00| seen| https://gist.github.com/OxBat/67c10534910e1409e04ae923c38fca2b...

CVE-2026-47932

creationtimestamp| type| source ---|---|--- 2026-06-09 22:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv7gj4vo52e 2026-06-10 07:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnw5b3mdyo27 2026-06-15 17:07:07+00:00| seen|...

CVE-2026-47929

creationtimestamp| type| source ---|---|--- 2026-06-09 22:02:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv76t5dy62y 2026-06-10 09:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdx7bjkc2n 2026-06-15 18:37:07+00:00| seen|...