EUVD-2026-48727

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...

EUVD-2026-48723

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy checks can be bypassed when the role trusts multiple OIDC providers. This issue has been patched in version 1.4.0...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, tetragon, spire-server, k8sgpt-operator, pgtimetable, vault-env, external-secrets-operator, wgcf, go-licenses, envconsul, buildah, cosign, mods, gke-gcloud-auth-plugin, openbao, falco-exporter, knative-operator, telegraf...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: spark-operator, terraform-provider-kubernetes, tetragon, spire-server, k8sgpt-operator, pgtimetable, vault-env, external-secrets-operator, wgcf, go-licenses, envconsul, buildah, cosign, mods, gke-gcloud-auth-plugin, openbao, falco-exporter, knative-operator, telegraf...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda-fips, azure-service-operator-fips, polaris, manifest-tool, opa-fips-envoy, scuttle, conftest-fips, sftpgo-plugin-geoipfilter, terraform-provider-random-fips, oras-fips, argo-cd, litestream, helm-exporter, git-sync,...

CVE-2023-42425

An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via the cloud connection components...

Kubernetes: DoS for client-go jsonpath func

Summary: jsonpath recursive descent cause a DoS vul kubectl apiextensions-apiserver cli-runtime and kubernetes is depends on client-go I think evalRecursive cause of this vulnerability function pos: client-go/util/jsonpath/jsonpath.go:451 Component Version: client-go:master Steps To Reproduce: i...