8333 matches found
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, aws-node-termination-handler, kine, tofu-controller, k8ssandra-operator, libnvidia-container, hubble-ui, sftpgo-plugin-pubsub, terraform-provider-tls, goreleaser, scorecard, spqr, terraform, secrets-store-csi-driver, rancher-agent, dex,...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: azuredisk-csi-fips, kaf, knative-serving, cert-manager-fips, rancher-agent, external-secrets-operator, ingress-nginx-controller, nvidia-nsight-compute-13.4, flux-fips, azurefile-csi-fips, kubernetes-dashboard, newrelic-fluent-bit-output-fips, knative-operator,...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer-fips, grafana-rollout-operator, kyverno-policy-reporter-plugins-kyverno, pluto, flux-image-automation-controller-fips, external-secrets-operator, actions-runner-controller-fips, ingress-nginx-controller, nvidia-nsight-compute-13.4,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: weaviate, k8ssandra-client, flux-operator-fips, azurefile-csi-fips, atlantis, kubevela-fips, apko, grafana-operator, helm-diff-fips, kyverno-fips, kube-arangodb-fips, nats, argo-cd, cloud-provider-azure-fips, vault-secrets-operator, azurefile-csi,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: weaviate, k8ssandra-client, flux-operator-fips, azurefile-csi-fips, atlantis, kubevela-fips, apko, grafana-operator, helm-diff-fips, kyverno-fips, kube-arangodb-fips, nats, argo-cd, cloud-provider-azure-fips, vault-secrets-operator, azurefile-csi,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: kubescape-operator-fips, nri-kafka-fips, terraform-provider-time, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, victorialogs, amazon-cloudwatch-agent-operator-fips, weaviate, google-guest-agent, spiffe-helper-fips, litestream, mc, temporal-ui-server-fips...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: kubescape-operator-fips, weaviate, spiffe-helper-fips, k8ssandra-client, harbor-scanner-trivy-fips, flux-operator-fips, azurefile-csi-fips, aws-signer-notation-plugin, atlantis, direnv, prometheus-pgbouncer-exporter-fips, prometheus-adapter, sftpgo-plugin-pubsub,...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058
aws-mcp-server is vulnerable to a remote command-injection (CVE-2026-5058) caused by insufficient validation of a user-supplied string before using it in a system call. This allows arbitrary code execution in the MCP server context. The CVSS v3 base score is 9.8 (CRITICAL) with network access, no...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059: Improper Neutralization of Special Elements used in an OS Command
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058: Improper Neutralization of Special Elements used in an OS Command
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
Vulnerability Disclosure: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Summary The Axios library is vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound...