6939 matches found
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: cilium-envoy-fips, tigera-operator, spire-server, gitlab-kas-fips, argo-workflows-fips, prometheus-mongodb-exporter, gosu, terraform, kubernetes-csi-node-driver-registrar, cilium-cli, istio, cloud-provider-azure-fips, keda, gitlab-rails-ce, flux,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, prometheus-mongodb-exporter, vault-csi-provider, flux-helm-controller-fips, commercial-chainloop-cli, rancher-fleet-fips, knative-operator, filebrowser, traefik-fips, nvidia-nsight-compute-13.4, docker-cli-fips, oras,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, prometheus-mongodb-exporter, vault-csi-provider, flux-helm-controller-fips, commercial-chainloop-cli, rancher-fleet-fips, knative-operator, filebrowser, traefik-fips, nvidia-nsight-compute-13.4, docker-cli-fips, oras,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: nuclei, argo-workflows-fips, stampdalf, age, crossplane-provider-azure-managedidentity, kserve-rest-proxy, aws-signer-notation-plugin-fips, filebrowser, mkcert, kubernetes-csi-external-attacher, nvidia-nsight-compute-13.4, docker-credential-acr-env-fips, portieris,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, prometheus-mongodb-exporter, redis-operator-fips, minio-object-browser-fips, secrets-store-csi-driver-provider-azure, crossplane-provider-aws-s3-fips, volcano, apisix-ingress-controller, pgpool2exporter-fips,...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server is vulnerable to a remote command-injection (CVE-2026-5058) caused by insufficient validation of a user-supplied string before using it in a system call. This allows arbitrary code execution in the MCP server context. The CVSS v3 base score is 9.8 (CRITICAL) with network access, no...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058: Improper Neutralization of Special Elements used in an OS Command
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059: Improper Neutralization of Special Elements used in an OS Command
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
Vulnerability Disclosure: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Summary The Axios library is vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound...
GHSA-R8HG-WQ4J-QXMG vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-aws, linux-vmware, linux-gcp...
GHSA-RX25-RPPP-X99W vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-aws, linux-vmware, linux-gcp...