drift-corpus

The Drift Corpus: Ring 0 Drift Corpus is the definitive, open-source repository of Windows Kernel patch diffs. These artifacts are produced using Drift Agent , ByteRay's automatic reverse engineering engine and part of the Argus-Systems platform. With Drift, we have successfully mapped, analyzed,...

podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation

A flaw was found in Podman. When a container image with checkpoint annotations is executed using the podman run command, Podman treats the image as a restored checkpoint and ignores user-specified sandboxing options, such as dropped privileges. An attacker can exploit this issue by enticing a use...

EUVD-2026-120126

compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action...

compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action

Impact The GitHub Actions runner treats certain text in a step's output as commands. The legacy form, command, is recognized anywhere in a line. compose-lint's text report prints service names, environment keys and lines of the Compose file, and it does not neutralize . Inside the compose-lint...

CVE-2026-123369 compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. Prior to 0.31.0, compose-lint prints attacker-controlled service names, environment keys, file lines, and other Compose text without neutralizing GitHub Actions and Azure Pipelines...

CVE-2026-123369 compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. Prior to 0.31.0, compose-lint prints attacker-controlled service names, environment keys, file lines, and other Compose text without neutralizing GitHub Actions and Azure Pipelines...

PT-2026-140930

Name of the Vulnerable Software and Affected Versions compose-lint versions prior to 0.31.0 Description The software fails to neutralize GitHub Actions and Azure Pipelines workflow-command openers when printing attacker-controlled service names, environment keys, file lines, and other Compose tex...

[SECURITY] Fedora 44 Update: jackson-annotations-2.18.12-1.fc44

Core annotations used for value types, used by Jackson data-binding package...

Fedora 44 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2026-b7ad391dd5)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7ad391dd5 advisory. Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-68498 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages updated to...

Security Bulletin: A Vulnerability in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU plus deferred CVE-2026-16440

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

CVE-2026-122305

A flaw was found in Kyverno. An authenticated user with low privileges can trigger a Denial of Service DoS by submitting resources containing self-referential variable templates within annotations. When processing these annotations, Kyverno enters an unbounded substitution loop that exhausts syst...

CVE-2026-92126

A flaw was found in Jenkins Script Security Plugin. This vulnerability allows attackers with permission to define and run sandboxed scripts, such as Pipelines, to bypass the sandbox protection. The plugin fails to reject @Builder annotations that specify an arbitrary class in their builderStrateg...

CVE-2026-53999

A flaw was found in the Radius Kubernetes controller. An authenticated attacker with permission to modify Deployment annotations can trigger unauthorized resource deletion, resulting in a Denial of Service DoS for other tenants in multi-tenant environments. This issue occurs because the controlle...

CVE-2026-18661

A flaw was found in Eclipse Jetty. This vulnerability allows a remote, unauthenticated attacker to bypass access controls, leading to unauthorized information disclosure and potential data modification. When an application combines servlet security annotations with deployment descriptor...

SUSE SLED15 / SLES15 Security Update : guava, j2objc-annotations (SUSE-SU-2026:5061-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5061-1 advisory. This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without...

SUSE-SU-2026:5061-1 Security update for guava, j2objc-annotations

This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError bsc1284985. Changes for guava: - Upgrade to...

WordPress Cozy Blocks cross-site scripting vulnerability

WordPress Cozy Blocks versions 2.2.27 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping for the content parameter icon.view/icon.layout/icon.gap, allowing authenticated attackers with contributor or higher privileges...

cri-o: cri-o: Sandbox state poisoning via pod annotations may expose runtime socket

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 packages and security update

Red Hat OpenShift Container Platform release 4.16.74 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

CVE-2026-116810

OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any project's annotations by calling the public reference.getChartReferences tRPC procedure. Attackers can send requests with guessable slug-based project IDs to dump cross-tenant...