4436 matches found
PT-2026-29671
Name of the Vulnerable Software and Affected Versions Copier versions prior to 9.14.1 Description The external data feature in Copier allows templates to load YAML files using paths controlled by the template. This can allow a malicious template to read YAML-parseable local files accessible to th...
Important: perl-YAML-Syck
Issue Overview: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the...
poc-studio-public
Nuclei Offline GUI This is a pure offline desktop prototype,...
CVE-2026-34165 vulnerabilities
Vulnerabilities for packages: osv-scanner, skaffold-fips, argo-events-fips, grafana-alloy-fips, crossplane-fips, grype-fips, k9s-fips, argocd-image-updater, nuclei, trivy-operator-fips, cg, k9s, nemo, pulumi, syft-fips, kaniko-fips, skaffold, nfpm, argo-cd, steampipe, cerbos-fips, teleport,...
GHSA-GM2X-2G9H-CCM8 vulnerabilities
Vulnerabilities for packages: osv-scanner, skaffold-fips, argo-events-fips, grafana-alloy-fips, crossplane-fips, grype-fips, k9s-fips, argocd-image-updater, nuclei, trivy-operator-fips, cg, k9s, nemo, pulumi, syft-fips, kaniko-fips, skaffold, nfpm, argo-cd, steampipe, cerbos-fips, teleport,...
CVE-2026-33762 vulnerabilities
Vulnerabilities for packages: argo-cd, gptscript, kaniko, snyk-cli, steampipe, nuclei, trivy, bom, src-fingerprint, xeol, teleport, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, gitlab-runner, kargo, gomplate, apko, zot, argo-workflows...
GHSA-GM2X-2G9H-CCM8 vulnerabilities
Vulnerabilities for packages: argo-cd, gptscript, kaniko, snyk-cli, steampipe, nuclei, trivy, bom, src-fingerprint, xeol, teleport, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, gitlab-runner, kargo, gomplate, apko, zot, argo-workflows...
CVE-2026-34165 vulnerabilities
Vulnerabilities for packages: argo-cd, gptscript, kaniko, snyk-cli, steampipe, nuclei, trivy, bom, src-fingerprint, xeol, teleport, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, gitlab-runner, kargo, gomplate, apko, zot, argo-workflows...
GHSA-JHF3-XXHW-2WPP vulnerabilities
Vulnerabilities for packages: argo-cd, gptscript, kaniko, snyk-cli, steampipe, nuclei, trivy, bom, src-fingerprint, xeol, teleport, scorecard, wolfictl, chezmoi, pulumi-language-dotnet, flux-image-automation-controller, gitea, argo-events, gitlab-runner, kargo, gomplate, apko, zot, argo-workflows...
[SECURITY] Fedora 42 Update: perl-YAML-Syck-1.39-1.fc42
This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around...
[SECURITY] Fedora 43 Update: perl-YAML-Syck-1.39-1.fc43
This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around...
[SECURITY] Fedora 44 Update: perl-YAML-Syck-1.39-1.fc44
This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around...
Fedora: Security Advisory (FEDORA-2026-d226775800)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 43 : perl-YAML-Syck (2026-3572f7e01c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3572f7e01c advisory. YAML::Syck versions up to and including 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YA...
Fedora 42 : perl-YAML-Syck (2026-d226775800)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d226775800 advisory. YAML::Syck versions up to and including 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YA...
Fedora: Security Advisory (FEDORA-2026-3572f7e01c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: spacecmd: Version 5.2.6-0 Update translation strings venv-salt-minion: Fix the typo causing buiding EL9 bundle without binary dependencies Backport security patches for Salt vendored tornado: CVE-2025-67724: missing validation of supplied reason phrase...
MLflow Command Injection vulnerability
A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the installmodeldependenciestoenv function. When deploying a model with envmanager=LOCAL, MLflow reads dependency specifications from the model artifact's pythonenv.yaml file and...
GHSA-R23Q-823P-VMF7 MLflow Command Injection vulnerability
A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the installmodeldependenciestoenv function. When deploying a model with envmanager=LOCAL, MLflow reads dependency specifications from the model artifact's pythonenv.yaml file and...
SUSE-SU-2026:1142-1 Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
This update fixes the following issues: mgr-push: - Version 5.2.3-0 Disable build for SLES 16 rhnlib: - Version 5.2.4-0 Disable build for SLES 16 spacecmd: - Version 5.2.6-0 Update translation strings spacewalk-client-tools: - Version 5.2.4-0 Disable build for SLES 16 uyuni-common-libs: - Version...