5237 matches found
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: argo-rollouts-fips, nri-mysql, minio-operator, crossplane-aws-provider-fips, flagger, flannel-cni-plugin, crossplane-provider-aws-iam-fips, cluster-proportional-autoscaler, hydra, kube-vip, kapp, prometheus-node-exporter, cortex-fips, neuvector, kyverno-fips, kine,...
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: argo-rollouts-fips, nri-mysql, minio-operator, crossplane-aws-provider-fips, flagger, flannel-cni-plugin, crossplane-provider-aws-iam-fips, cluster-proportional-autoscaler, hydra, kube-vip, kapp, prometheus-node-exporter, cortex-fips, neuvector, kyverno-fips, kine,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: argo-rollouts-fips, nri-mysql, minio-operator, crossplane-aws-provider-fips, flagger, crossplane-provider-aws-iam-fips, cluster-proportional-autoscaler, hydra, kube-vip, kapp, prometheus-node-exporter, cortex-fips, neuvector, kyverno-fips, kine,...
Craft CMS: save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host
Summary - The saveimagesAsset graphql mutation allows a user to give a url of an image to download. Url must use a domain, not a raw IP. - Attacker sets up domain attacker.domain with an A record of something like 169.254.169.254 special AWS metadata IP - Attacker invokes saveimagesAsset with url...
CVE-2026-25492 Craft has a save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveimagesAsset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
PT-2026-7142
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save images Asset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
Ubuntu: Security Advisory (USN-8015-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8013-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8014-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Issue Correction: Run dnf update aws-nitro-enclaves-cli --releasever 2023.10.20260202 or dnf update --advisory ALAS2023-2026-1371 --releasever 2023.10.202602...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, aws-privateca-issuer-fips, mariadb-operator, percona-xtradb-cluster-operator, mariadb-operator-fips, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-istio-csr-fips, opentelemetry-operator, cert-manager-cmctl, gitlab-operator,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer, cert-manager-istio-csr, percona-server-mongodb-operator, step-issuer, opentelemetry-operator, cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-csi-driver, mariadb-operator...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer, cert-manager-istio-csr, percona-server-mongodb-operator, step-issuer, opentelemetry-operator, cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-csi-driver, mariadb-operator...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: step-issuer-fips, aws-privateca-issuer-fips, mariadb-operator, percona-xtradb-cluster-operator, mariadb-operator-fips, cert-manager-webhook-pdns, cert-manager-cmctl-fips, cert-manager-istio-csr-fips, opentelemetry-operator, cert-manager-cmctl, gitlab-operator,...
arches (=8.0.0a1), django-accounts-api (=1.2.5) +24 more potentially affected by CVE-2026-1312 via django (>=6.0.0 <=6.0.1)
django PYPI version =6.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.1.0, =6.0.0, =0.20.4, =0.22.1 and more Source cves: CVE-2026-1312 Source advisory: SNYK:PYTHON-DJANGO-15198931...
arches (=8.0.0a1), django-accounts-api (=1.2.5) +24 more potentially affected by CVE-2026-1285 via django (>=6.0.0 <=6.0.1)
django PYPI version =6.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.1.0, =6.0.0, =0.20.4, =0.22.1 and more Source cves: CVE-2026-1285 Source advisory: OSV:GHSA-4RRR-2H4V-F3J9...
arches (=8.0.0a1), django-accounts-api (=1.2.5) +24 more potentially affected by CVE-2025-13473 via django (>=6.0.0 <=6.0.1)
django PYPI version =6.0.0, =1.1.0, =0.1.0, =0.1.0b2, =0.1.0, =6.0.0, =0.20.4, =0.22.1 and more Source cves: CVE-2025-13473 Source advisory: OSV:GHSA-2MCM-79HX-8FXW...