6979 matches found
CVE-2025-61732 vulnerabilities
Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, cephcsi, memcached-exporter, gogatekeeper, helm-mapkubeapis, licenseclassifier, minify, nsc-fips, terragrunt, fulcio, grype-fips, wuzz, grafana-mimir, teleport-operator-fips, skaffold, doppler-kubernetes-operator,...
CVE-2025-68121 vulnerabilities
Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, cephcsi, memcached-exporter, gogatekeeper, helm-mapkubeapis, nsc-fips, terragrunt, fulcio, grype-fips, wuzz, grafana-mimir, teleport-operator-fips, skaffold, doppler-kubernetes-operator, request-1279,...
GHSA-8JVR-VH7G-F8GX vulnerabilities
Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, cephcsi, memcached-exporter, gogatekeeper, helm-mapkubeapis, licenseclassifier, minify, nsc-fips, terragrunt, fulcio, grype-fips, wuzz, grafana-mimir, teleport-operator-fips, skaffold, doppler-kubernetes-operator,...
Craft CMS: save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host
Summary - The saveimagesAsset graphql mutation allows a user to give a url of an image to download. Url must use a domain, not a raw IP. - Attacker sets up domain attacker.domain with an A record of something like 169.254.169.254 special AWS metadata IP - Attacker invokes saveimagesAsset with url...
CVE-2026-25492 Craft has a save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveimagesAsset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
CVE-2026-25492: Server-Side Request Forgery (SSRF)
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the saveimagesAsset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
PT-2026-7142
Craft CMS is a content management system. In Craft versions 3.5.0 through 4.16.17 and 5.0.0-RC1 through 5.8.21, the save images Asset GraphQL mutation can be abused to fetch internal URLs by providing a domain name that resolves to an internal IP address, bypassing hostname validation. When a...
Ubuntu: Security Advisory (USN-8015-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8013-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-8014-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Issue Correction: Run dnf update aws-nitro-enclaves-cli --releasever 2023.10.20260202 or dnf update --advisory ALAS2023-2026-1371 --releasever 2023.10.202602...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-xtradb-cluster-operator, step-issuer, percona-server-mongodb-operator-fips, mariadb-operator-fips, cert-manager-csi-driver-fips, percona-xtradb-cluster-operator-fips, cert-manager-openshift-routes-fips, cert-manager-cmctl-fips, gitlab-operator-fips,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-webhook-pdns, step-issuer, mariadb-operator, cert-manager-istio-csr, opentelemetry-operator, aws-privateca-issuer, cert-manager-cmctl, cert-manager-csi-driver...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-webhook-pdns, step-issuer, mariadb-operator, cert-manager-istio-csr, opentelemetry-operator, aws-privateca-issuer, cert-manager-cmctl, cert-manager-csi-driver...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: percona-xtradb-cluster-operator, step-issuer, percona-server-mongodb-operator-fips, mariadb-operator-fips, cert-manager-csi-driver-fips, percona-xtradb-cluster-operator-fips, cert-manager-openshift-routes-fips, cert-manager-cmctl-fips, gitlab-operator-fips,...
CVE-2025-22107 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...
CVE-2025-38206 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-azure, linux-gcp...