PT-2025-33020 · Palo Alto Networks · Prisma Cloud +1

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Checkov by Prisma® Cloud versions prior to 3.2.415 Description: An unsafe deserialization issue in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non-administrative...

Palo Alto Networks Checkov 安全漏洞

Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks USA. A security vulnerability exists in Palo Alto Networks Checkov, which stems from an information leak that could lead to the exposure of Prisma Cloud access keys in plaintext...

GHSA-5RJG-FVGR-3XXF vulnerabilities

Vulnerabilities for packages: datadog-agent, wazuh-manager, superset, spamcheck, py3-pipenv, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.3, wazuh-manager-fips, emissary, aws-cli, checkov, datadog-agent-fips, kserve, pgadmin4-fips, ansible-operator, dask-gateway, jwt-tool,...

CVE-2025-47273 vulnerabilities

Vulnerabilities for packages: datadog-agent, wazuh-manager, superset, spamcheck, py3-pipenv, nvidia-nsight-compute-13.1, nvidia-nsight-compute-13.3, wazuh-manager-fips, emissary, aws-cli, checkov, datadog-agent-fips, kserve, pgadmin4-fips, ansible-operator, dask-gateway, jwt-tool,...

GHSA-5RJG-FVGR-3XXF vulnerabilities

Vulnerabilities for packages: aws-cli, superset, kserve, py3-pipenv, datadog-agent, dask-gateway, jwt-tool, checkov, emissary...

CVE-2025-47273 vulnerabilities

Vulnerabilities for packages: aws-cli, superset, kserve, py3-pipenv, datadog-agent, dask-gateway, jwt-tool, checkov, emissary...

awslabs-ccapi-mcp-server (>=1.0.1 <=1.0.18), bridgecrew (>=3.2.415 <=3.2.477) +9 more potentially affected by unknown CVE via asteval (=1.0.5)

asteval PYPI version =1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on asteval and may be impacted: - awslabs-ccapi-mcp-server =1.0.1, =3.2.415, =3.2.415, =0.1.130, =6.0.0, =5.8.0, =5.8.0, =0.0.8, =0.1.0, =0.15.0 Source cves: unknown CVE Source...

CVE-2024-42367 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, airflow, request-1276, kserve, nemo, dask-gateway, checkov...

GHSA-JWHX-XCG6-8XHJ vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, airflow, request-1276, kserve, nemo, dask-gateway, checkov...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: py3.9-setuptools, nvidia-nsight-compute-13.1, py3-cassandra-medusa, py3-torchvision-cuda-11.8, az, superset, airflow, kubeflow-katib, request-1276, nvidia-nsight-compute-13.2, reflex, py3-pipenv, nemo, k8s-sidecar, checkov...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: py3.9-setuptools, nvidia-nsight-compute-13.1, py3-cassandra-medusa, py3-torchvision-cuda-11.8, az, superset, airflow, kubeflow-katib, request-1276, nvidia-nsight-compute-13.2, reflex, py3-pipenv, nemo, k8s-sidecar, checkov...

GHSA-JFMJ-5V4G-7637 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, checkov, superset...

CVE-2024-5569 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, checkov, superset...

CVE-2024-22190 vulnerabilities

Vulnerabilities for packages: checkov...

CVE-2024-22190 vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-2MQJ-M65W-JGHX vulnerabilities

Vulnerabilities for packages: checkov...

GHSA-2MQJ-M65W-JGHX vulnerabilities

Vulnerabilities for packages: checkov...

TerraGoat - Vulnerable Terraform Infrastructure

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments. Introduction TerraGoat was built to enable DevSecOps design and implement a...

CVE-2021-3040

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...

CVE-2021-3040

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...