5236 matches found
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: gitlab-kas-fips, aws-flb-firehose, falco-no-driver, coredns, gitlab-workhorse-ce-fips, cloud-provider-azure-fips, argo-workflows, libnvidia-container, newrelic-fluent-bit-output, cloud-provider-azure, external-secrets-operator, karpenter, jaeger-fips, docker-cli-fips...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: nodetaint, dbmate, actions-runner-controller-fips, external-secrets-operator, karpenter, aws-iam-authenticator, dkron, k8s-metacollector-fips, ingress-nginx-controller, dataplaneapi-fips, k8s-metacollector, local-path-provisioner, flux-source-watcher, polaris-fips,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: aws-flb-firehose, newrelic-fluent-bit-output, kubescape-server, ingress-nginx-controller, gosu, pulumi-language-yaml, kube-arangodb-fips, step-ca, falcoctl-fips, ko, flux-source-controller-fips, kpt, helm-exporter, cert-manager, cephcsi-fips, argo-cd,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: aws-flb-firehose, newrelic-fluent-bit-output, kubescape-server, ingress-nginx-controller, gosu, pulumi-language-yaml, kube-arangodb-fips, step-ca, falcoctl-fips, ko, flux-source-controller-fips, kpt, helm-exporter, cert-manager, cephcsi-fips, argo-cd,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: generic-device-plugin-fips, pvc-autoresizer-fips, aws-flb-firehose, actions-runner-controller-fips, grafana-mimir, newrelic-fluent-bit-output, conjur-cli, db-operator-fips, gatus, hubble-fips, jobset-fips, multus-cni-fips, kubescape-server,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: actions-runner-controller-fips, newrelic-fluent-bit-output, gatus, hubble-fips, terraform-provider-kubernetes-fips, thanos-operator, gosu, modelmesh-runtime-adapter, pulumi-language-yaml, ko, rancher-security-scan-fips, cert-manager, longhorn-cli, elastic-agent-fips,...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server is vulnerable to a remote command-injection (CVE-2026-5058) caused by insufficient validation of a user-supplied string before using it in a system call. This allows arbitrary code execution in the MCP server context. The CVSS v3 base score is 9.8 (CRITICAL) with network access, no...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
Vulnerability Disclosure: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Summary The Axios library is vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound...
GHSA-P5VH-P63C-CG4V vulnerabilities
Vulnerabilities for packages: linux-azure, linux-vmware, linux-aws, linux-gcp, linux-qemu...
GHSA-R8HG-WQ4J-QXMG vulnerabilities
Vulnerabilities for packages: linux-azure, linux-vmware, linux-aws, linux-gcp, linux-qemu...
GHSA-RX25-RPPP-X99W vulnerabilities
Vulnerabilities for packages: linux-azure, linux-vmware, linux-aws, linux-gcp, linux-qemu...