EUVD-2026-48727

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...

EUVD-2026-48723

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, IAM-role policy checks can be bypassed when the role trusts multiple OIDC providers. This issue has been patched in version 1.4.0...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: kubescape-operator, neuvector-dbgen, paranoia, kubernetes-ingress-defaultbackend, dkron, trivy, yace, aws-load-balancer-controller, kuberlr, cluster-autoscaler, lazydocker, temporal, http-echo, kubernetes-csi-external-health-monitor, petname, opentelemetry-collector,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: kubescape-operator, neuvector-dbgen, paranoia, kubernetes-ingress-defaultbackend, dkron, trivy, yace, aws-load-balancer-controller, kuberlr, cluster-autoscaler, lazydocker, temporal, http-echo, kubernetes-csi-external-health-monitor, opentelemetry-collector, vale,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, terraform-provider-pagerduty, aws-signer-notation-plugin-fips, crossplane-provider-aws-backup-fips, clickhouse-operator, grpcurl, crossplane-provider-aws-s3-fips, nats, kots, liquibase-package-manager,...

CVE-2023-42425

An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via the cloud connection components...

Kubernetes: DoS for client-go jsonpath func

Summary: jsonpath recursive descent cause a DoS vul kubectl apiextensions-apiserver cli-runtime and kubernetes is depends on client-go I think evalRecursive cause of this vulnerability function pos: client-go/util/jsonpath/jsonpath.go:451 Component Version: client-go:master Steps To Reproduce: i...