Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the toCedarExpr method, which does not escape special characters when converting values to source code. An attacker can inject arbitrary expressions by supplying specially crafted input, potentially altering...

CedarJava has type confusion vulnerability

Summary CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. Under certain circumstances, improper input handling could allow type confusion across the Java-Rust FFI boundary. Impact Record-to-Entity type confusion across the...

Access of Resource Using Incompatible Type ('Type Confusion')

Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' through improper handling of reserved keys in the JSON protocol when serializing CedarMap. An attacker can cause unauthorized access or manipulation of data by supplying...

PT-2026-50976

Name of the Vulnerable Software and Affected Versions CedarJava versions prior to 2.3.6 CedarJava versions prior to 3.4.1 CedarJava versions prior to 4.9.0 Description Improper input handling in the toCedarExpr method on Cedar Value types allows for Cedar-expression injection. The method fails to...

PT-2026-50975

Name of the Vulnerable Software and Affected Versions CedarJava versions prior to 2.3.6 CedarJava versions prior to 3.4.1 CedarJava versions prior to 4.9 Description Improper input handling allows Record-to-Entity type confusion across the Java-Rust FFI Foreign Function Interface boundary...

CVE-2026-25727 vulnerabilities

Vulnerabilities for packages: wasm-pack, yazi, geckodriver, cargo-c, py3-xet-core, nushell, parseable, pixi, samply, berg, wadm, wash, mountpoint-s3, topgrade, quiche, kdash, yara-x, eza, buck2, shadowsocks-rust, zellij, zizmor, uv, rye, xh, cedar, bat, wasmcloud, sqlx, deno, lychee, zola,...

GHSA-R6V5-FH4H-64XC vulnerabilities

Vulnerabilities for packages: wasm-pack, yazi, geckodriver, cargo-c, py3-xet-core, nushell, parseable, pixi, samply, berg, wadm, wash, mountpoint-s3, topgrade, quiche, kdash, yara-x, eza, buck2, shadowsocks-rust, zellij, zizmor, uv, rye, xh, cedar, bat, wasmcloud, sqlx, deno, lychee, zola,...

CVE-2026-25727 vulnerabilities

Vulnerabilities for packages: wasmcloud, pixi, kdash, py3-xet-core, zed, qdrant, ztunnel, starship, watchexec, xh, cargo-c, parseable, guestproxyagent, fnm, sccache, buck2, eza, deno, quiche, virtiofsd, samply, geckodriver, sentry-cli, cargo-audit, typst, cedar, rye, atuin, sqlx, uutils, yazi,...

GHSA-R6V5-FH4H-64XC vulnerabilities

Vulnerabilities for packages: wasmcloud, pixi, kdash, py3-xet-core, zed, qdrant, ztunnel, starship, watchexec, xh, cargo-c, parseable, guestproxyagent, fnm, sccache, buck2, eza, deno, quiche, virtiofsd, samply, geckodriver, sentry-cli, cargo-audit, typst, cedar, rye, atuin, sqlx, uutils, yazi,...

CVE-2022-23397

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. NOTE: the vendor disputes this because the ado.im reference has "no...

Malicious code in @malware-test-cedar-clipt-geals-goaty/test-mlw3-cedar-clipt-geals-goaty (npm)

The package @malware-test-cedar-clipt-geals-goaty/test-mlw3-cedar-clipt-geals-goaty was found to contain malicious code...

VulnCheck KEV: CVE-2022-23397

The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent in through a URL parameter. This leads to a Reflected Cross-Site Scripting vulnerability. NOTE: the vendor disputes this because the ado.im reference has "no...

Intent-Aware Authorization for Zero Trust CI/CD

This paper introduces intent-aware authorization for Zero Trust CI/CD systems. Identity establishes who is making the request, but additional signals are required to decide whether access should be granted. We describe a control loop architecture where policy engines such as OPA and Cedar evaluat...

GHSA-WWQ9-3CPR-MM53 vulnerabilities

Vulnerabilities for packages: xh, cedar, cargo-audit, buck2, nushell, pixi, wasmcloud, starship, tealdeer, qdrant, shadowsocks-rust, berg, linkerd2-proxy, wadm, wit-bindgen, wash...

MAL-2024-1394 Malicious code in cedar-snippet (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in cedar-snippet (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

schwan-cedar.com Improper Access Control vulnerability OBB-3809811

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-6283-1: Linux kernel vulnerabilities

Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did not properly perform permissions checks when handling HCI sockets. A physically proximate attacker could use this to cause a denial of service bluetooth communication. CVE-2023-2002 Zheng Zhang discovered that the...

Null pointer dereference

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.00...

DeftTorero: tactics, techniques and procedures of intrusions revealed

Earlier this year, we started hunting for possible new DeftTorero aka Lebanese Cedar, Volatile Cedar artifacts. This threat actor is believed to originate from the Middle East and was publicly disclosed to the cybersecurity community as early as 2015. Notably, no other intelligence was shared unt...