PT-2026-50262

Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue...

CVE-2026-41280: Incorrect Authorization

Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue...

aiidalab-launch (>=2021.1001.0a0, <=2023.1019.0), config-env (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.1)

python-dotenv PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aiidalab-launch =2021.1001.0a0, =0.0.1, =1.1.1, =0.1.2, =0.1.2, =0.1.0, =0.8.0.dev6, =0.58.0, =0.1.0, =2.1.7, =1.0.0, =0.0.20, =0.1.0...

CVE-2026-26225

Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated...

Weaponizing AWS ECS Task Definitionsto Steal Credentials From Running Containers

The post Weaponizing AWS ECS Task Definitions to Steal Credentials From Running Containers appeared first on Rhino Security Labs...

Pillaging AWS ECS Task Definitions for Hardcoded Secrets

The post Pillaging AWS ECS Task Definitions for Hardcoded Secrets appeared first on Rhino Security Labs...