EUVD-2026-48727

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...

EUVD-2026-48723

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy checks can be bypassed when the role trusts multiple OIDC providers. This issue has been patched in version 1.4.0...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-geoipfilter, wuzz, victoriametrics, minio-object-browser, aws-privateca-issuer, timescaledb-parallel-copy, argo-workflows, aws-eks-pod-identity-agent, lazygit, helm-push, dataplaneapi, knative-client, aws-nuke, direnv, flux, tigera-operator,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: capslock, licenseclassifier, sftpgo-plugin-geoipfilter, wuzz, victoriametrics, nri-memcached, minio-object-browser, aws-privateca-issuer, timescaledb-parallel-copy, argo-workflows, aws-eks-pod-identity-agent, lazygit, helm-push, dataplaneapi, knative-client, aws-nuke...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: rke2-runtime, gitlab-operator-fips, dex, tempo, eksctl, ceph-csi-operator, direnv, aws-flb-firehose-fips, kube-arangodb, kcp, crossplane-provider-aws-rds-fips, dask-gateway, dockerize, crossplane-provider-family-azure, kafkaexporter-fips, apache-exporter,...

CVE-2023-42425

An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via the cloud connection components...

Kubernetes: DoS for client-go jsonpath func

Summary: jsonpath recursive descent cause a DoS vul kubectl apiextensions-apiserver cli-runtime and kubernetes is depends on client-go I think evalRecursive cause of this vulnerability function pos: client-go/util/jsonpath/jsonpath.go:451 Component Version: client-go:master Steps To Reproduce: i...