aidoc (>=0.1.0, <=0.1.5), astrohack (>=0.0.1, <=0.1.6) +115 more potentially affected by CVE-2026-59890 via setuptools (65.6.3)

setuptools PYPI version 65.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aidoc =0.1.0, =0.0.1, =0.96.0, =0.209.0, =1.1.31, =0.0.1a0, =0.1.1, =5.1.0, =0.1.4, =0.7.0, =0.1.0a1, =0.1.0, =0.2.4 - certifikadas8 0.1.1...

aws-service-catalog-factory (>=0.27.1, <=0.31.0), aws-service-catalog-puppet (>=0.45.0, <=0.50.3) +62 more potentially affected by CVE-2025-50181 via urllib3 (1.25.6)

urllib3 PYPI version 1.25.6 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - aws-service-catalog-factory =0.27.1, =0.45.0, =0.1.0, =1.0.1, =0.0.2, =3.0.1, =0.2.0, =0.0.1, =0.0.1, =0.0.5 and more Source cves: CVE-2025-50181...

CVE-2026-46456

Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which...

EUVD-2019-18374

Malware in sbrugna...

aws-service-catalog-factory (>=0.27.1, <=0.31.0), aws-service-catalog-puppet (>=0.45.0, <=0.50.3) +62 more potentially affected by CVE-2025-50181 via urllib3 (1.25.6)

urllib3 PYPI version 1.25.6 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - aws-service-catalog-factory =0.27.1, =0.45.0, =0.1.0, =1.0.1, =0.0.2, =3.0.1, =0.2.0, =0.0.1, =0.0.1, =0.0.5 and more Source cves: CVE-2025-50181...

ai-db (0.0.2), aws-service-catalog-puppet (0.242.1) +41 more potentially affected by CVE-2025-50181 via urllib3 (1.26.17)

urllib3 PYPI version 1.26.17 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - ai-db 0.0.2 - aws-service-catalog-puppet 0.242.1 - bondai =0.3.0b2, =1.6.37, =0.3.9, =0.3.10 - c7n-logexporter 0.4.31 - c7n-mailer 0.6.31 -...

Missing permission checks in AWS Credentials Plugin

A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

GHSA-M9GV-4523-JFFM Missing permission checks in AWS Credentials Plugin

A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27199

A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27198

A cross-site request forgery CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27199

A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27198

A cross-site request forgery CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27198

A cross-site request forgery CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27198

A cross-site request forgery CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27199: Missing Authorization

A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

CVE-2022-27198: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

Directory traversal

Directory traversal vulnerability in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to T...