GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: cilium-cli, kyverno-policy-reporter-plugins-kyverno, datadog-agent-fips, docker-fips, crossplane-provider-aws-elasticsearch-fips, vault-fips, cloudflared-fips, mattermost, crossplane-provider-aws-firehose-fips, rancher, zarf-fips, reports-server, spire-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: act, helm, cosign, wolfictl, splunk-otel-collector, argo-cd, kargo, gitea, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws, pulumi-language-yaml, eksctl, external-dns, pulumi-language-dotnet, kubernetes, podman,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: helm, telegraf, gitlab-kas, spire-server, gitea, istio, zot, cloud-provider-aws, trivy-operator, flux-image-automation-controller, kubescape, external-dns, kubernetes, kaf, containerd, opentelemetry-collector, zarf, aactl, minio, nerdctl, loki, skaffold, prometheus,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: act, helm, cosign, wolfictl, splunk-otel-collector, argo-cd, kargo, gitea, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws, pulumi-language-yaml, eksctl, external-dns, pulumi-language-dotnet, kubernetes, podman,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: act, helm, wolfictl, argo-cd, gitea, docker-cli-buildx, openbao, cloud-provider-aws, pulumi-language-yaml, external-dns, pulumi-language-dotnet, kubernetes, podman, containerd, aactl, prometheus, snyk-cli, dagger, buildah, opentofu, prometheus-operator, caddy,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: helm, telegraf, gitlab-kas, spire-server, istio, docker-cli-buildx, zot, cloud-provider-aws, external-dns, kubernetes, podman, kaf, containerd, opentelemetry-collector, aactl, minio, nerdctl, loki, prometheus, snyk-cli, kubernetes-dashboard, rancher, kine,...

EUVD-2026-37512

pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses incomplete fix of CVE-2026-46678...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the image import process. An attacker can interact with internal network infrastructure and perform error-based port scanning by supplying a crafted URL to the /images endpoint, which causes the daemo...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the image import process. An attacker can interact with internal network infrastructure and perform error-based port scanning by supplying a crafted URL to the /images endpoint, which causes the daemo...

EUVD-2026-39819

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object results in stack overflow when deeply O100K nested objects are present. This vulnerability is fixed in 1.35.11, 1.36.7, 1.37.3, and 1.38.1...

CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

EUVD-2026-39805

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2026-28385

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery SSRF vulnerability in the image import functionality allows authenticated users with the cancreateimages entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a...

CVE-2025-11919 Unprotected temporary directories in Wolfram Cloud may result in privilege escalation

The default JVM can access files and directories under /tmp/ including the $TemporaryDirectory of other users on the same cloud instance /tmp/UserTemporaryFiles/. The -init file for the the JVM initialization exists in the vulnerable directory during the startup of the JVM. An attacker with acces...

CVE-2025-11919

CVE-2025-11919 affects Wolfram Cloud (multi-tenant environment) where the default JVM can access temporary resources under /tmp, including other users’ TemporaryDirectory. A race during JVM startup allows an attacker with access to shared /tmp to create/replace .jar files via the -init file, caus...

Security Bulletin: Due to the use of IBM Tivoli Monitoring and IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary IBM Tivoli Monitoring code execution and IBM Db2 vulnerabilities have been found in IBM Tivoli Monitoring shipped with IBM Cloud Pak System IBM Tivoli MonitoringITM patternType itm pType, and IBM Cloud Pak System DB2 pattern type db2 pType shipped with Cloud Pak System. Vulnerabilities we...

Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server Liberty affect IBM Cloud Pak System [CVE-2024-56339. CVE-2023-50314]

Summary Vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Cloud Pak System. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker to bypass...

Security Bulletin: Due to use of Nodejs Express.js, multiple vulnerabilities affect IBM Cloud Pak System[CVE-2024-43796, CVE-2024-43799, CVE-2024-43800]

Summary Multiple vulnerabilities in Send cross-site scripting XSS within the SendStream.redirect, serve-static built-in and response.redirect found in Node.js Express.js which is used by IBM Cloud Pak System. Vulnerabilities were addressed by IBM Cloud Pak System. Vulnerability Details...

PT-2026-52890

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.35.11 Envoy versions prior to 1.36.7 Envoy versions prior to 1.37.3 Envoy versions prior to 1.38.1 Description An issue exists in the UDP DNS filter when configured with local or remote resolution for names exactly 25...