1792 matches found
GHSA-RV83-G57W-FR8J vulnerabilities
Vulnerabilities for packages: step-issuer-fips, nri-nginx, k8sgpt, vertical-pod-autoscaler-fips, kratos, crossplane-provider-aws-memorydb-fips, azure-workload-identity-webhook, kube-logging-logging-operator, pguser, crossplane-fips, renovate, prometheus-bind-exporter, mesosphere-vsphere-csi-fips,...
CVE-2026-25679 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, nri-nginx, k8sgpt, vertical-pod-autoscaler-fips, crossplane-provider-aws-memorydb-fips, azure-workload-identity-webhook, kube-logging-logging-operator, pguser, crossplane-fips, prometheus-bind-exporter, mesosphere-vsphere-csi-fips, eks-distro,...
GHSA-WF6X-7X77-MVGW vulnerabilities
Vulnerabilities for packages: kubeflow-katib, vitess, rancher-api-ui, argo-workflows...
CVE-2026-29063 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, vitess, rancher-api-ui, argo-workflows...
GHSA-WF6X-7X77-MVGW vulnerabilities
Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, authentik-fips, rancher-api-ui, vitess, gitlab-rails-ce, authentik, argo-workflows, arangodb...
CVE-2026-29063 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, gitlab-rails-ce-fips, authentik-fips, rancher-api-ui, vitess, gitlab-rails-ce, authentik, argo-workflows, arangodb...
Before You Hand over the Wheel: Evaluating LLMs for Security Incident Analysis
Security incident analysis SIA poses a major challenge for security operations centers, which must manage overwhelming alert volumes, large and diverse data sources, complex toolchains, and limited analyst expertise. These difficulties intensify because incidents evolve dynamically and require...
Malicious AI Assistant Extensions Harvest LLM Chat Histories
Microsoft Defender has been investigating reports of malicious Chromium‑based browser extensions that impersonate legitimate AI assistant tools to harvest LLM chat histories and browsing data. Reporting indicates these extensions have reached approximately 900,000 installs. Microsoft Defender...
How to Avoid Confidentiality Gaps in Early-Stage Startups
Startups often expose sensitive data during pitches and hiring. Learn when to use NDAs and simple workflows to close confidentiality gaps...
BIT-KIBANA-2026-26938 Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF)
Improper Neutralization of Special Elements Used in a Template Engine CWE-1336 exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery SSRF via Code Injection CAPEC-242. This requires an...
BIT-ELK-2026-26938 Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF)
Improper Neutralization of Special Elements Used in a Template Engine CWE-1336 exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery SSRF via Code Injection CAPEC-242. This requires an...
CLEANSTART-2026-MW73882 filippo
Multiple security vulnerabilities affect the argo-workflows package. filippo. See references for individual vulnerability details...
CLEANSTART-2026-BY85815 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Multiple security vulnerabilities affect the argo-workflows package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the approval-enabled host=node workflows. An attacker can bypass intended approval integrity by reusing a previously approved request with altered environment...
CVE-2026-26938
Improper Neutralization of Special Elements Used in a Template Engine CWE-1336 exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery SSRF via Code Injection CAPEC-242. This requires an...
Improper Neutralization of Special Elements Used in a Template Engine
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine in the Workflows module. An attacker with the...
EUVD-2026-8873
Improper Neutralization of Special Elements Used in a Template Engine CWE-1336 exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery SSRF via Code Injection CAPEC-242. This requires an...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: hydra, policy-controller, crossplane-provider-aws-cloudfront, apko, opentofu, melange, ksops, crossplane-provider-keycloak, crossplane-provider-azure-storage, kyverno-notation-aws, crossplane-provider-family-aws, flux-helm-controller, pulumi-language-dotnet,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: hydra, policy-controller, crossplane-provider-aws-cloudfront, apko, opentofu, melange, ksops, crossplane-provider-keycloak, crossplane-provider-azure-storage, kyverno-notation-aws, crossplane-provider-family-aws, flux-helm-controller, pulumi-language-dotnet,...