CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, pvc-autoresizer, db-operator, crossplane-provider-aws-s3-fips, packer, amazon-cloudwatch-agent-operator, helm-diff, yace, tetragon-fips, authservice, gatus,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, pvc-autoresizer, db-operator, crossplane-provider-aws-s3-fips, packer, amazon-cloudwatch-agent-operator, helm-diff, yace, tetragon-fips, authservice, gatus,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, pvc-autoresizer, db-operator, crossplane-provider-aws-s3-fips, kubecolor, packer, amazon-cloudwatch-agent-operator, helm-diff, yace, tetragon-fips, authservice,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, pvc-autoresizer, db-operator, crossplane-provider-aws-s3-fips, kubecolor, packer, amazon-cloudwatch-agent-operator, helm-diff, yace, tetragon-fips, authservice,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, pvc-autoresizer, db-operator, crossplane-provider-aws-s3-fips, kubecolor, packer, amazon-cloudwatch-agent-operator, helm-diff, yace, tetragon-fips, authservice,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, pvc-autoresizer, db-operator, crossplane-provider-aws-s3-fips, packer, amazon-cloudwatch-agent-operator, helm-diff, yace, tetragon-fips, authservice, gatus,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-function-environment-configs, clickhouse-operator, crossplane-provider-aws-rds, conftest-fips, pvc-autoresizer, db-operator, crossplane-provider-aws-s3-fips, kubecolor, packer, amazon-cloudwatch-agent-operator, helm-diff, yace, tetragon-fips, authservice,...

CVE-2026-23032 null_blk: fix kmemleak by releasing references to fault configfs items

In the Linux kernel, the following vulnerability has been resolved: nullblk: fix kmemleak by releasing references to fault configfs items When CONFIGBLKDEVNULLBLKFAULTINJECTION is enabled, the null-blk driver sets up fault injection support by creating the timeoutinject, requeueinject, and...

CVE-2025-69218

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can access the topuploads admin report which should be restricted to admins only. This report displays direct URLs to all uploaded files on the site, including sensitive...

CVE-2025-69218

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can access the topuploads admin report which should be restricted to admins only. This report displays direct URLs to all uploaded files on the site, including sensitive...

CVE-2025-69218 Discourse moderators can access admin-only reports exposing private upload URLs

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can access the topuploads admin report which should be restricted to admins only. This report displays direct URLs to all uploaded files on the site, including sensitive...

CVE-2025-69218

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can access the topuploads admin report which should be restricted to admins only. This report displays direct URLs to all uploaded files on the site, including sensitive...

CVE-2025-69218 Discourse moderators can access admin-only reports exposing private upload URLs

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can access the topuploads admin report which should be restricted to admins only. This report displays direct URLs to all uploaded files on the site, including sensitive...

CVE-2025-69218

Discourse vulnerability CVE-2025-69218: In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can access the private top_uploads admin report, which reveals direct URLs to all uploaded files (including potential sensitive content like user data exports and admin backups). The...

PT-2026-5194

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 3.5.4 Discourse versions prior to 2025.11.2 Discourse versions prior to 2025.12.1 Discourse versions prior to 2026.1.0 Description Discourse is an open source discussion platform. Moderators can access the top uploa...

Mitigating the OWASP Top 10 for Large Language Models Applications Using Intelligent Agents

Large Language Models LLMs have emerged as a transformative and disruptive technology, enabling a wide range of applications in natural language processing, machine translation, and beyond. However, this widespread integration of LLMs also raised several security concerns highlighted by the Open...

CVE-2025-49046

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup xPromoter topbarpromoter allows Reflected XSS.This issue affects xPromoter: from n/a through = 1.3.4...

CVE-2025-49046

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup xPromoter topbarpromoter allows Reflected XSS.This issue affects xPromoter: from n/a through = 1.3.4...

CVE-2025-49046

CVE-2025-49046 (LambertGroup xPromoter top_bar_promoter) : The Red Hat/NVD/Patchstack data describe a reflected Cross‑Site Scripting (XSS) vulnerability in LambertGroup xPromoter’s top_bar_promoter for versions up to and including 1.3.4. The issue arises from improper neutralization of input duri...

PT-2026-3969

Name of the Vulnerable Software and Affected Versions LambertGroup xPromoter versions through 1.3.4 Description A Reflected Cross-site Scripting XSS issue exists in the top bar promoter component of LambertGroup xPromoter. This allows for improper neutralization of input during web page generatio...