CVE-2026-54353

Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Budibase's SSRF blacklist through DNS rebinding. The outbound fetch flow validates a hostname against the blacklist before the request is sent, but the actual socket connectio...

CVE-2026-50137

Budibase is an open-source low-code platform. Prior to 3.39.0, an anonymous attacker who knows or can enumerate a workspace id app... and an S3-source datasource id ds... can call this endpoint with no auth and obtain a 15-minute pre-signed PUT URL minted on the victim's IAM identity. The endpoin...

Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D

Summary Multiple vulnerabilities were addressed in IBM Watsonx BI Assistant for CP4D version 5.4.0 Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerab...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, kaf, frankenphp-8.5, kube-state-metrics, omnictl-multiarch, spire-server, upwind-agent, docker-machine-driver-harvester, skaffold-fips, trivy-operator, argo-cd-fips, minio-fips, terraform, kine, argo-workflows-fips, k9s-fips, tigera-operator,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ssm, crossplane-provider-aws-wafv2, chainloop-control-plane-fips, kargo, frankenphp-8.5, crossplane-provider-aws-guardduty, argo-events-fips, upwind-agent, cloudflared, crossplane-provider-aws-ec2-fips, crossplane-provider-azure-servicebus,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, cilium, nuclei, kargo, fulcio, skaffold, gomplate, scorecard, vault-benchmark, buildkitd, melange, cilium-cli, step-issuer, atlantis, guac, age, flux, splunk-otel-collector,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, spire-server, nerdctl, kubernetes-dashboard, chisel, kine, cilium, mattermost, argocd-image-updater, prometheus, fscrypt, kaf, k3s, skaffold, istio, prometheus-operator, knative-serving, flux-source-controller, kyverno, gitea, containerd, kubernetes, cilium-cl...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, cilium, nuclei, kargo, fulcio, skaffold, gomplate, scorecard, vault-benchmark, buildkitd, melange, cilium-cli, step-issuer, atlantis, guac, flux, splunk-otel-collector,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: argo-cd, kubernetes-dashboard, gptscript, cilium, nuclei, skaffold, gomplate, scorecard, melange, cilium-cli, step-issuer, guac, flux, zarf, apko, opentelemetry-collector, helm, opentofu, trivy-operator, witness, osv-scanner, syft, dagger, nerdctl, kine,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: spire-server, nerdctl, kubernetes-dashboard, kine, cilium, mattermost, buildah, fscrypt, prometheus, kaf, k3s, podman, istio, prometheus-operator, knative-serving, kyverno, containerd, kubernetes, cilium-cli, zot, cert-manager, cloud-provider-aws, flux, gitlab-kas,...

EUVD-2026-37512

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses incomplete fix of CVE-2026-46678...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the image import process. An attacker can interact with internal network infrastructure and perform error-based port scanning by supplying a crafted URL to the /images endpoint, which causes the daemo...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the image import process. An attacker can interact with internal network infrastructure and perform error-based port scanning by supplying a crafted URL to the /images endpoint, which causes the daemo...

EUVD-2026-39819

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack overflow when deeply O100K nested objects are present. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1...

EUVD-2026-39805

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2026-28385

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2025-11919 Unprotected temporary directories in Wolfram Cloud may result in privilege escalation

The default JVM can access files and directories under /tmp/ including the $TemporaryDirectory of other users on the same cloud instance /tmp/UserTemporaryFiles/. The -init file for the the JVM initialization exists in the vulnerable directory during the startup of the JVM. An attacker with acces...

CVE-2025-11919

CVE-2025-11919 affects Wolfram Cloud (multi-tenant environment) where the default JVM can access temporary resources under /tmp, including other users’ TemporaryDirectory. A race during JVM startup allows an attacker with access to shared /tmp to create/replace .jar files via the -init file, caus...