5236 matches found
CVE-2026-39883 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, docker-machine-driver-harvester, fluent-operator, sftpgo-plugin-kms, cluster-api-gcp-controller, slsa-verifier, terraform-provider-google, kapp, neuvector-sigstore-interface, otel-cli, crossplane-provider-aws-elasticache,...
GHSA-HFVC-G4FC-PQHX vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, docker-machine-driver-harvester, fluent-operator, sftpgo-plugin-kms, cluster-api-gcp-controller, slsa-verifier, terraform-provider-google, kapp, neuvector-sigstore-interface, otel-cli, crossplane-provider-aws-elasticache,...
CVE-2026-39883 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure-fips, opentelemetry-collector, step-ca, velero-plugin-for-gcp, cloud-provider-aws-fips, keda-fips, kubernetes-csi-node-driver-registrar-fips, ops-agent, livekit-server, eksctl, trivy-operator-fips, kube-mgmt, sops-fips, google-guest-agent-manager...
GHSA-HFVC-G4FC-PQHX vulnerabilities
Vulnerabilities for packages: cloud-provider-azure-fips, opentelemetry-collector, step-ca, velero-plugin-for-gcp, cloud-provider-aws-fips, keda-fips, kubernetes-csi-node-driver-registrar-fips, ops-agent, livekit-server, eksctl, trivy-operator-fips, kube-mgmt, sops-fips, google-guest-agent-manager...
OPENSUSE-SU-2026:10512-1 aws-c-event-stream-devel-0.7.0-1.1 on GA media
These are all security issues fixed in the aws-c-event-stream-devel-0.7.0-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu: Security Advisory (USN-8159-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8148-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for aws-c-event-stream (important)
openSUSE security update: security update for aws-c-event-stream ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20477-1 Rating: important References: bsc1261298 Cross-References: CVE-2026-5190 Affected Products: openSUSE Leap 16.0...
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVSSv3.1 Rating: Medium CVSSv3.1 Score: 5.9 CVSSv3.1 Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Summary and Impact An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame...
arches (=8.0.0a1), desktop-django-starter (=0.1.0) +33 more potentially affected by CVE-2026-4277 via django (>=6.0.0 <=6.0.3)
django PYPI version =6.0.0, =2.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-4277 Source advisory: SNYK:PYTHON-DJANGO-15923568...
arches (=8.0.0a1), desktop-django-starter (=0.1.0) +33 more potentially affected by CVE-2026-3902 via django (>=6.0.0 <=6.0.3)
django PYPI version =6.0.0, =2.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-3902 Source advisory: OSV:GHSA-MVFQ-GGXM-9MC5...
arches (=8.0.0a1), desktop-django-starter (=0.1.0) +33 more potentially affected by CVE-2026-33034 via django (>=6.0.0 <=6.0.3)
django PYPI version =6.0.0, =2.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-33034 Source advisory: OSV:GHSA-933H-HP56-HF7M...
arches (=8.0.0a1), desktop-django-starter (=0.1.0) +33 more potentially affected by CVE-2026-4277 via django (>=6.0.0 <=6.0.3)
django PYPI version =6.0.0, =2.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-4277 Source advisory: OSV:PYSEC-2026-52...
CVE-2026-5707
Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio RES version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To...
CVE-2026-35022
Rejected reason: This CVE ID has been rejected by its CVE Numbering Authority CNA. It was determined that the -p flag behavior is documented in Anthropic's claude -h output with an explicit warning that non-interactive mode should only be used in trusted directories, making this intended and...
Ubuntu: Security Advisory (USN-8145-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8148-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-30708
Name of the Vulnerable Software and Affected Versions Anthropic Claude Code CLI and Claude Agent SDK affected versions not specified Description Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection issue in authentication helper execution. Helper configuration values are...
Ubuntu: Security Advisory (USN-8145-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
