13683 matches found
PYSEC-2026-2968 Azure PromptFlow remote code execution related to Jinja templates
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...
CLEANSTART-2026-EY91394 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-CV84139 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-61448 Parse Server 9.0.0 Stored XSS via malformed Content-Type
Parse Server is affected by a stored cross-site scripting XSS vulnerability in versions = 9.0.0, 9.10.0-alpha.2 and = 8.6.83. When an uploaded file's extension is not recognized by the mime package, Parse Server preserves the client-supplied Content-Type. A malformed Content-Type that is not a...
PT-2026-57441
Name of the Vulnerable Software and Affected Versions Parse Server versions 9.0.0 through 9.10.0-alpha.1 Parse Server versions 8.x through 8.6.83 Description A stored cross-site scripting XSS issue exists when the software fails to recognize an uploaded file's extension via the mime package,...
GHSA-XCGV-8MV7-V8C7 vulnerabilities
Vulnerabilities for packages: jaeger-fips, harbor, cerbos, gatekeeper, terraform, dataplaneapi, buildah, commercial-grafana, loki, redka, commercial-expanso-edge, vault-secrets-operator, rke2-runtime, cluster-api-fips, etcd-fips, buildkite-agent-fips, melange, ocm-kubernetes-controller, grafana,...
CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1
Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API
A flaw was found in Prometheus, an open-source monitoring system. The clientsecret field within the Azure Active Directory AD remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access t...
GHSA-HFRJ-R4V7-3997 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-WFX4-V2WF-4GMP vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
CVE-2026-53202 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
CVE-2026-53228 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
CVE-2026-53229 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-3J78-PF43-6MVQ vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-3J9Q-258H-4V38 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-5Q2P-7748-G6QP vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-GVRM-XH5G-W8V6 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-qemu-melange...