19573 matches found
CVE-2026-50197 Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requests
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...
CVE-2026-50197
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...
CVE-2026-50197 Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requests
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...
CVE-2026-50197 Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requests
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.10, zalando/skipper's OpenPolicyAgent integration silently bypasses request-body inspection on HTTP/1.1 Transfer-Encoding: chunked and HTTP/2 requests that omit the content-length pseudo-header, because the...
Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS
Summary The Kubernetes admission webhook handler reads the entire request body using io.ReadAllr.Body without any size limit. Any client that can reach the webhook port within the cluster can send a multi-GB payload, causing the skipper process to exhaust memory and be OOM-killed. This disrupts a...
CVE-2025-60357
AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...
CVE-2026-53714 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
CVE-2026-53715 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
CVE-2026-53716 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
CVE-2026-53717 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
GHSA-8FV2-88GG-HM7Q vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
GHSA-CXPQ-8V7Q-CG56 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
GHSA-M2V6-2JMH-4C68 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
CVE-2026-53718 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
GHSA-22XC-XG2R-9J7V vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
GHSA-FCRP-7GC2-93G7 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
CVE-2026-53713 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...
CVE-2026-53719 vulnerabilities
Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, datadog-agent, gitlab-operator-fips, tigera-operator, datadog-agent-fips...