PT-2026-40952

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...

PT-2026-41186

Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.26 Description The task create tool spawns durable sub-agents that inherit insecure default settings. Specifically, the allow shell variable defaults to true and the auto approve variable defaults to true. When ...

EUVD-2026-30144

Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...

CVE-2026-33378

Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...

CVE-2026-33378

Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...

CVE-2026-33378 Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro

Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...

CVE-2025-32425

CVE-2025-32425 affects AutoGPT platform prior to v0.6.32, where container execution logs emitted to stdout/stderr could be captured by Docker and stored as container logs without a size limit. This lack of log rotation/log size control can lead to server disk resource exhaustion and DoS under hig...

CVE-2025-32425

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. In AutoGPT, the execution process is recorded to the console stdout/stderr, and deployed in container mode, which is automatically captured by Docker an...

GHSA-FX83-V9X8-X52W vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

CVE-2026-44288 vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

CVE-2026-44292 vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

CVE-2026-44289 vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

GHSA-JVWF-75H9-CWGG vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

GHSA-2PR8-PHX7-X9H3 vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

GHSA-685M-2W69-288Q vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

GHSA-66FF-XGX4-VCHM vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

CVE-2026-44290 vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

CVE-2026-44294 vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

GHSA-Q6X5-8V7M-XCRF vulnerabilities

Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, cadence-web, nemo, librechat, homepage, pulumi, vitess, gemini-cli, renovate...

PT-2026-40792

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An Out-of-Memory OOM condition can be triggered by overloading the server through the use of the $ timeGroup macro. This issue requires the use of a SQL...