CVE-2024-58096 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-vmware, linux-aws, linux-azure...

GHSA-CC5P-PMC6-4CGC vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-vmware, linux-aws, linux-azure...

CVE-2026-23102 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-gcp, linux-vmware, linux-aws, linux-azure...

openSUSE 16 Security Update : aws-c-event-stream (openSUSE-SU-2026:20477-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20477-1 advisory. Changes in aws-c-event-stream: - CVE-2026-5190: Fixed a out-of-bounds write caused by crafted event-stream messages bsc1261298 Tenable has extracted the...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: syft, azcopy, crossplane-provider-aws-dynamodb, docker-cli-buildx, knative-serving, kubernetes-csi-node-driver-registrar, cloudprober, tflint, certificate-transparency, flux, kyverno-notation-aws, cri-tools, grafana, boring-registry, melange, emissary,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: syft, azcopy, crossplane-provider-aws-dynamodb, docker-cli-buildx, knative-serving, kubernetes-csi-node-driver-registrar, cloudprober, tflint, certificate-transparency, flux, kyverno-notation-aws, cri-tools, grafana, boring-registry, melange, emissary,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, bento-fips, fulcio, commercial-grafana, kube-arangodb-fips, sops-fips, frankenphp-8.5, knative-serving-fips, crossplane-provider-azure-storagesync, cloudbeat, cloudbeat-fips, crossplane-provider-aws-cloudwatch, ceph-csi-operator-fips,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, bento-fips, fulcio, commercial-grafana, kube-arangodb-fips, sops-fips, frankenphp-8.5, knative-serving-fips, crossplane-provider-azure-storagesync, cloudbeat, cloudbeat-fips, crossplane-provider-aws-cloudwatch, ceph-csi-operator-fips,...

OPENSUSE-SU-2026:10512-1 aws-c-event-stream-devel-0.7.0-1.1 on GA media

These are all security issues fixed in the aws-c-event-stream-devel-0.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu: Security Advisory (USN-8148-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8159-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for aws-c-event-stream (important)

openSUSE security update: security update for aws-c-event-stream ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20477-1 Rating: important References: bsc1261298 Cross-References: CVE-2026-5190 Affected Products: openSUSE Leap 16.0...

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

CVSSv3.1 Rating: Medium CVSSv3.1 Score: 5.9 CVSSv3.1 Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Summary and Impact An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame...

PT-2026-90006

Name of the Vulnerable Software and Affected Versions Amazon AWS SDK for Go v2 versions prior to release-2026-03-23 Description An unrecovered panic exists in the event stream header decoder. An unauthenticated remote actor can cause the consuming application process to terminate by sending a...

CVE-2026-5707

Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio RES version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To...

CVE-2026-35022

Rejected reason: This CVE ID has been rejected by its CVE Numbering Authority CNA. It was determined that the -p flag behavior is documented in Anthropic's claude -h output with an explicit warning that non-interactive mode should only be used in trusted directories, making this intended and...

CVE-2026-34975: Improper Neutralization of CRLF Sequences

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were interpolated directly into raw MIME...

CVE-2026-5708: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio RES prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance profile permissions, and interact with...

PT-2026-30708

Name of the Vulnerable Software and Affected Versions Anthropic Claude Code CLI and Claude Agent SDK affected versions not specified Description Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection issue in authentication helper execution. Helper configuration values are...

CVE-2026-5707: Improper Neutralization of Special Elements used in an OS Command

Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio RES version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To...