org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

CVE-2026-47358

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates v...

CVE-2026-47358

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates v...

CVE-2026-47358

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates v...

CVE-2026-47358

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates v...

CVE-2026-47358

Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery SSRF via external URL resolution in uploaded IaC templates when running in server mode. When Terrascan parses uploaded ARM templates or CloudFormation templates, it resolves external URLs referenced within those templates v...

CVE-2026-47358

CVE-2026-47358 affects Terrascan v1.18.3 and earlier. In server mode, Terrascan parses uploaded ARM/CloudFormation templates and resolves external URLs via hashicorp/go-getter with default detectors (including FileDetector), enabling an unauthenticated attacker to upload templates containing atta...

Terrascan security vulnerabilities

Trenescan is an open-source infrastructure code static security analysis tool developed by Tenable. Versions of Trenescan 1.18.3 and earlier contain security vulnerabilities. These vulnerabilities stem from server-side request forgeing vulnerabilities in the external URL parsing of uploaded IaC...

PT-2026-41954

Name of the Vulnerable Software and Affected Versions Terrascan versions prior to 1.18.4 Description Terrascan is susceptible to Server-Side Request Forgery SSRF when operating in server mode. The issue occurs during the parsing of uploaded Infrastructure as Code IaC templates, specifically ARM o...

aws-encryption-sdk-cli (>=2.1.0, <=3.1.0), cloudformation-cli-python-lib (>=2.1.9, <=2.1.16) +2 more potentially affected by CVE-2026-6550 via aws-encryption-sdk (>=2.0.0, <=3.1.1)

aws-encryption-sdk PYPI version =2.0.0, =2.1.0, =2.1.9, =1.0.0, =1.0.1, =1.0.5 Source cves: CVE-2026-6550 Source advisory: GHSA-V638-38FC-RHFV...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

EUVD-2013-6238

Malware in sbrugna...

EUVD-2017-18383

Malware in sbrugna...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Amazon AWS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of AWS Simple Storage Service. When installed from the official GitHub...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services AWS Cloud Development Kit CDK that could have resulted in an account takeover under specific circumstances. "The impact of this issue could, in certain scenarios, allow an attacker to gain administrative access...

Medium: aws-cfn-bootstrap

Issue Overview: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to th...