6511 matches found
PT-2026-59067
Summary AWS Encryption SDK ESDK for Python is a client-side encryption library. An issue exists where, under certain circumstances, a specific cryptographic algorithm downgrade in the caching layer might allow an authenticated local threat actor to bypass key commitment policy enforcement via a...
CVE-2026-15508 Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function buildtargeturl of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extractedpathandquery can lead to server-side request forgery...
CVE-2026-15508 Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function buildtargeturl of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extractedpathandquery can lead to server-side request forgery...
CVE-2026-15508
Helicone ai-gateway (up to 0.2.0-beta.30) is affected. The flaw is in the AWS Metadata Service component, specifically the build_target_url function in ai-gateway/src/dispatcher/service.rs, where manipulating extracted_path_and_query can trigger server-side request forgery. Exploitation is possib...
PT-2026-57575
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build target url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted path and query can lead to server-side request...
CVE-2026-15508: Server-Side Request Forgery (SSRF)
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function buildtargeturl of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extractedpathandquery can lead to server-side request forgery...
GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities
Vulnerabilities for packages: trivy-operator-fips, cloudbeat-fips, neuvector-sigstore-interface-fips, spire-server-fips, ratify, kyverno, crossplane-fips, image-factory, docker-fips, ratify-fips, zarf, teleport, tkn-fips, trivy-fips, commercial-kyverno, tkn, policy-controller, aactl,...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: jobset, redka, crossplane-provider-aws-chime, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, dive, crossplane-provider-aws-sagemaker, cluster-api-provider-vsphere-fips,...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-elasticache, trino, kuma, crossplane-provider-aws-eks, crossplane-provider-aws-cloudwatchlogs, step, kube-vip-cloud-provider, aws-flb-cloudwatch, envconsul, witness, pgpool2exporter, k8s-device-plugin, kubernetes-csi-driver-nfs, pulumi,...
CVE-2026-31589 vulnerabilities
Vulnerabilities for packages: linux-aws...
CVE-2026-42505 vulnerabilities
Vulnerabilities for packages: jobset, redka, crossplane-provider-aws-chime, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, dive, crossplane-provider-aws-sagemaker, cluster-api-provider-vsphere-fips,...
CVE-2026-53961: Insufficient Verification of Data Authenticity
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, the AWS SES bounce webhook at POST /webhooks/aws verified that SNS messages were signed by Amazon but did not bind them to trusted TopicArn values, allowing any AWS account holder to publish...
CVE-2026-53179 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-qemu, linux-azure...
GHSA-9MHF-2P25-MWM3 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-qemu, linux-azure...
GHSA-CWX4-F9X9-PQHH vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-qemu, linux-azure...
GHSA-VCCQ-H5J4-92QR vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-qemu, linux-azure...
GHSA-VG6G-9H68-878W vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-qemu, linux-azure...
CVE-2026-53325 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-aws, linux-qemu, linux-azure...