21 matches found
CVE-2026-122321
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...
EUVD-2026-117231
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...
CVE-2026-122321 Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...
CVE-2026-122321
Kyverno versions 1.18.0 before 1.19.2 are vulnerable to a signature verification bypass in the verifyImages component. The root cause is that cached verification results are keyed by the image reference string (e.g., a tag) instead of being bound to the verified digest. This allows an attacker wi...
PT-2026-137342
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string such as a tag rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit...
Incorrect Authorization
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Incorrect Authorization via the IntrospectionControlPlugin in src/GraphQL/ParseGraphQLServer.js, which reads...
GHSA-R44W-V6GF-X3P6 pyLoad has an authentication bypass in API key validation (check_apikey cache)
Summary The API-key cache in checkapikey allows an attacker to authenticate with a forged API key as long as the legitimate key for the same keyid has been used recently. On a cache hit, the API key secret is never verified, resulting in a complete authentication bypass during the cache lifetime...
PT-2026-117593
Summary The API-key cache in check apikey allows an attacker to authenticate with a forged API key as long as the legitimate key for the same key id has been used recently. On a cache hit, the API key secret is never verified, resulting in a complete authentication bypass during the cache lifetim...
CVE-2026-107719 fast-jwt: Verifier cache accepts expired JWTs without iat.
fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.3.4, the fast-jwt createVerifier cache can continue accepting a previously valid, signed JWT after its exp time when caching is enabled and the token has exp but no iat. In src/verifier.js, cacheSet derives the exp cache deadlin...
CVE-2026-100622
Versions of capgo.app through 12.129.0 are vulnerable to a flaw where the application fails to verify the deletion status of bundle artifacts when serving them from the public file read endpoint . This allows unauthenticated attackers to download deleted bundles using cached URLs. Furthermore, ca...
EUVD-2026-87717
capgo.app through 12.129.0 fails to verify deletion status when serving cached bundle artifacts from the public file read endpoint. Unauthenticated attackers can download deleted bundles using cached URLs and trigger restoration of deleted objects into R2 storage on cache hits...
Prompt Caching Support in Spring AI with Anthropic Claude
Large language model API costs can accumulate quickly when applications repeatedly send the same prompt content. A typical scenario: you're building a document analyzer that includes a 3,000-token document in every request. Five questions about that document means processing 15,000 tokens of...
EUVD-2016-8292
Malware in sbrugna...
SUSE CVE-2023-53593
In the Linux kernel, the following vulnerability has been resolved: cifs: Release folio lock on fscache read hit. Under the current code, when cifsreadpageworker is called, the call contract is that the callee should unlock the page. This is documented in the readfolio section of...
Cache Hit Ratio: The Key Metric for Happier Users and Lower Expenses
...
How Cache Purge Helps Keep Your Website Content Fresh and Responsive
Content Delivery Networks CDNs accelerate web traffic across the internet through servers residing in strategic locations known as points of presence or PoPs across the globe. Each PoP has a number of caching servers, each of which contains a cached version of your website or application. By...
Smart DNS: Delivering the Best Subscriber Experience
This is the second in a series of blog posts that discuss how smart DNS resolvers can enhance ongoing network transformation efforts such as the transition to 5G, better integration of Wi-Fi, and new network designs that optimize the edge to improve the subscriber experience, service delivery, an...
Acronis: Web cache poisoning at www.acronis.com
Summary I found the problem of cache poisoning in www.acronis.com. A poisoned web cache can potentially be a devastating means of distributing numerous different attacks, exploiting vulnerabilities such as XSS, JavaScript injection, open redirection, and so on. Steps To Reproduce 1. Use...
Optimizing Video Streaming Performance with Origin-Assisted Prefetching
Online video streaming is everywhere today. It's available on the smallest hand-held devices to the largest of screens in our living rooms. Magically and for the most part, it works and provides a very captivating experience. However, if you step back to look at the overall architecture, media...
DuckieTV CMS 1.1.5 Local File Inclusion Vulnerability
Exploit for php platform in category web applications | | Exploit Title: DuckieTV CMS Local File Inclusion | Exploit Author: Ashiyane Digital security Team | Vendor Homepage: http://schizoduckie.github.io/DuckieTV/ | Software Link: https://github.com/SchizoDuckie/DuckieTV/archive/angular.zip |...