6773 matches found
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: newrelic-k8s-metadata-injection, smokescreen, flux, nfs-subdir-external-provisioner, nova, external-secrets-operator, metacontroller, rabbitmq-messaging-topology-operator, supercronic, clickhouse-operator, newrelic-infra-operator, victoriametrics, dataplaneapi,...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: gitlab-pages, flux, kots, kubernetes, external-secrets-operator, fuse-overlayfs-snapshotter, external-dns, runc, helm, dask-gateway, kube-fluentd-operator, mattermost, falco-no-driver, spire-server, kubernetes-dashboard, chezmoi, kubescape, zot, cilium, snyk-cli,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: gitsign, xeol, terraform-provider-time, certificate-transparency, knative-eventing, flux, kots, grpc-health-probe, external-secrets-operator, migrate, trivy-operator, kafka-proxy, docker-credential-gcr, docker-machine-driver-harvester, knative-operator, wave, grafana...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, smokescreen, wuzz, grpc-health-probe, external-secrets-operator, buf, mods, docker-credential-gcr, nats-top, pluto, dask-gateway, memcached-exporter, kubescape, zot, kyverno-policy-reporter-ui, rancher-agent, mountpoint-s3-csi-driver, pulumi,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, smokescreen, wuzz, grpc-health-probe, external-secrets-operator, buf, mods, docker-credential-gcr, nats-top, pluto, dask-gateway, memcached-exporter, kubescape, zot, kyverno-policy-reporter-ui, rancher-agent, mountpoint-s3-csi-driver, pulumi,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: terraform-provider-time, smokescreen, wuzz, grpc-health-probe, external-secrets-operator, buf, mods, docker-credential-gcr, nats-top, pluto, dask-gateway, memcached-exporter, kubescape, zot, sbom-convert, kyverno-policy-reporter-ui, rancher-agent,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: gitsign, xeol, terraform-provider-time, certificate-transparency, knative-eventing, flux, kots, grpc-health-probe, external-secrets-operator, migrate, trivy-operator, kafka-proxy, docker-credential-gcr, docker-machine-driver-harvester, knative-operator, wave, grafana...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: gitlab-kas-fips, mattermost-fips, redka, telegraf, kine, buildkite-agent, knative-eventing-fips, tekton-pipelines-fips, vault, datadog-agent, cloud-provider-aws, aactl, runc, k9s-fips, karpenter-fips, commercial-expanso-edge, harbor-fips, aws-flb-cloudwatch-fips,...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: github-mcp-server, flux-image-reflector-controller, flux-helm-controller, temporal, volume-modifier-for-k8s-fips, aws-iam-authenticator, k8s-metacollector-fips, omni-fips, kubernetes-dashboard-web-fips, kube-logging-logging-operator, karpenter-fips,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: atlantis-fips, buildkite-agent, tekton-pipelines-fips, omni-fips, kubevirt-cdi-uploadserver, envconsul, karpenter-fips, osv-scanner, xeol-fips, scorecard, sonobuoy, dask-gateway, syncthing, jaeger-fips, argo-cd, rancher-fleet-fips, helm-diff-fips, kube-conformance,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: atlantis-fips, buildkite-agent, tekton-pipelines-fips, omni-fips, kubevirt-cdi-uploadserver, envconsul, karpenter-fips, osv-scanner, xeol-fips, scorecard, sonobuoy, dask-gateway, syncthing, jaeger-fips, argo-cd, rancher-fleet-fips, helm-diff-fips, kube-conformance,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: custom-pod-autoscaler, jupyterhub-k8s-image-awaiter-fips, cortex, crossplane-provider-keycloak, crossplane-function-go-templating, linkerd2-cni-plugin, kubevirt-cdi-apiserver-fips, atlantis-fips, longhorn-backing-image-manager-fips, buildkite-agent,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: jupyterhub-k8s-image-awaiter-fips, cortex, crossplane-provider-keycloak, atlantis-fips, longhorn-backing-image-manager-fips, longhorn-backing-image-manager, kubevirt-cdi-uploadserver, kube-logging-logging-operator, karpenter-fips, quic-go, multus-cni, scorecard,...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server is vulnerable to a remote command-injection (CVE-2026-5058) caused by insufficient validation of a user-supplied string before using it in a system call. This allows arbitrary code execution in the MCP server context. The CVSS v3 base score is 9.8 (CRITICAL) with network access, no...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...