CVE-2026-41173

The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...

CVE-2026-41173

OpenTelemetry.Sampler.AWS is affected by an unbounded HTTP response body read in the AWS X-Ray remote sampler prior to 0.1.0-alpha.8. The AWSXRaySamplerClient.DoRequestAsync call reads the entire HTTP response into memory (ReadAsStringAsync) without size limits, enabling an attacker controlling o...

GHSA-FMQP-4WFC-W3V7 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GHSA-8WFP-579W-6R25 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GHSA-Q93Q-V844-JRQP vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

CVE-2026-40868 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GHSA-F9G8-6PPC-PQQ4 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno...

GHSA-F9G8-6PPC-PQQ4 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws, kyverno-fips, kyverno...

CVE-2026-40868 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws, kyverno...

GHSA-Q93Q-V844-JRQP vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws, kyverno...

GHSA-8WFP-579W-6R25 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...

PT-2026-34721

Name of the Vulnerable Software and Affected Versions OpenTelemetry.Sampler.AWS versions prior to 0.1.0-alpha.8 OpenTelemetry.Resources.AWS versions prior to 1.15.1 Description OpenTelemetry.Sampler.AWS and OpenTelemetry.Resources.AWS read unbounded HTTP response bodies from configured endpoints...

PT-2026-34763

OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT TEMPLATE DIR and AWS CONFIG FILE are not blocked in the host-env blocklist. Attackers can exploit approved exec requests to redirect git or AWS CLI behavior through attacker-controlled configuration...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the POST /api/lunchflow/link endpoint, which insufficiently validates user-supplied URLs and fails to restrict access to internal or sensitive network addresses. An attacker can cause the server to...

Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Overview aws-encryption-sdk is an AWS Encryption SDK implementation for Python Affected versions of this package are vulnerable to Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' via the shared key cache. An attacker can bypass key commitment policy enforcement by...

CVE-2026-6550

The vulnerability CVE-2026-6550 affects the AWS Encryption SDK for Python in its caching layer. A cryptographic downgrade in the key cache could allow an authenticated local actor to bypass key commitment policy enforcement, enabling ciphertext to be decrypted into multiple possible plaintexts. A...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-kas, headlamp, kiali, sonobuoy, trivy, jitsucom-bulker, kubeflow-pipelines, argo-cd, cluster-api, kubernetes, kubescape, terraform-provider-kubernetes, argocd-image-updater, cloudnative-pg, kwok, aws-node-termination-handler, argo-rollouts, cilium-cli,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: gitlab-kas, headlamp, kiali, sonobuoy, trivy, jitsucom-bulker, kubeflow-pipelines, argo-cd, cluster-api, kubernetes, kubescape, terraform-provider-kubernetes, argocd-image-updater, cloudnative-pg, kwok, aws-node-termination-handler, argo-rollouts, cilium-cli,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: sonobuoy, velero, kpt, consul-k8s, k9s-fips, kubeflow-pipelines, tigera-operator, percona-server-mongodb-operator-fips, argo-cd-fips, kubernetes-dashboard-api-fips, linkerd2-fips, kube-arangodb-fips, rancher-support-bundle-kit, verticadb-operator, gitlab-runner-fips,...

CVE-2026-6437

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...