5190 matches found
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5059
aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...
CVE-2026-5058
aws-mcp-server is vulnerable to a remote command-injection (CVE-2026-5058) caused by insufficient validation of a user-supplied string before using it in a system call. This allows arbitrary code execution in the MCP server context. The CVSS v3 base score is 9.8 (CRITICAL) with network access, no...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
CVE-2026-5058 aws-mcp-server Command Injection Remote Code Execution Vulnerability
aws-mcp-server Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the...
Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
Vulnerability Disclosure: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Summary The Axios library is vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound...
GHSA-RX25-RPPP-X99W vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-RWC9-H9MH-XFWQ vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-P5VH-P63C-CG4V vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-R8HG-WQ4J-QXMG vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-WGQX-9HCF-WPVQ vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-GMR7-W89V-RR2Q vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
CVE-2026-23157 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
CVE-2025-39925 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
CVE-2025-71227 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
CVE-2025-71074 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-qemu-melange, linux-vmware, linux-qemu, linux-aws...