CVE-2026-117681

A flaw in konflux-ci allows for privilege escalation because the user interface proxy automatically disables TLS certificate verification for internal backend services in environments without a default service certificate authority. Because the proxy includes a cluster-scoped authentication token...

CVE-2026-108764

Apache Kylin versions 4.0.0 through 5.0.4 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The flaw primarily impacts the kylin job service when it is directly exposed to the public network, though in-house deployments are typically less affected. To remediate this issue, use...

CVE-2026-108764 Apache Kylin: job-driver UI proxy SSRF

Server-Side request forgery SSRF vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommend...

CVE-2026-23904

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior. This...

CVE-2026-23904

Apache Kyuubi versions 1.8.0 before 1.12.0 are vulnerable to SSRF or open-proxy behavior. The Engine UI proxy incorrectly accepts a host and port from the request path, allowing a remote requester with network access to the proxy to force the Kyuubi server to send HTTP requests to arbitrary reach...

CVE-2026-23904 Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior. This...

CVE-2026-23904 Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior. This...

CVE-2026-23904 Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior. This...

MAL-2022-6088 Malicious code in shipping-notice-ui-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e3be4a355ac0eb601e2bbf8b35164dffb1d93edab3e82e741a8dafef941177b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in shipping-notice-ui-proxy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in shipping-notice-ui-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e3be4a355ac0eb601e2bbf8b35164dffb1d93edab3e82e741a8dafef941177b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...