1122758 matches found
ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...
Important: Red Hat Security Advisory: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
OpenJDK: Enhance TLS server (2026-08 Security Update)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...
EUVD-2026-63087
A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. This script gains access to sensitive credentials, such as GitHub access tokens and registry passwords, used in the build...
CVE-2026-76139
The acm-operator-bundle build process executes an unpinned script from stolostrum/release@master using full build credentials (GitHub tokens, registry passwords) without verifying authenticity or integrity. A remote attacker controlling that script could inject malicious code, gaining unauthorize...
CVE-2026-75569
mce-operator-bundle (Red Hat) contains a build-time supply chain flaw: the bundle-generation process fetches business logic from the mutable branch stolostron/release@master without commit pinning or signature verification. An attacker with write access to that remote repository can inject arbitr...
CVE-2026-75569 Mce-operator-bundle: mce-operator-bundle: bundle-generation business logic fetched from mutable stolostron/release@master
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
EUVD-2026-63086
A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...
CVE-2026-53545
Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...
Malicious code in rc4-secure (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bcd1dcd28ea36c95e97448601f2414f34d53eabfc5452ec2471a316ebed97b The package presents itself as an RC4 encryption library but contains a hidden dropper reachable from its public API. RC4Cipher.encrypt invokes...
CVE-2026-61634 vulnerabilities
Vulnerabilities for packages: zipkin, logstash, logstash-fips, thingsboard, nuxeo, traccar, cassandra-reaper, conductor, traccar-fips, conductor-fips, druid...
CVE-2026-63336 vulnerabilities
Vulnerabilities for packages: zipkin, logstash, logstash-fips, thingsboard, nuxeo, traccar, cassandra-reaper, conductor, traccar-fips, conductor-fips, druid...
GHSA-5M9F-RPHJ-C435 vulnerabilities
Vulnerabilities for packages: zipkin, logstash, logstash-fips, thingsboard, nuxeo, traccar, cassandra-reaper, conductor, traccar-fips, conductor-fips, druid...
CVE-2026-63335 vulnerabilities
Vulnerabilities for packages: zipkin, logstash, logstash-fips, thingsboard, nuxeo, cassandra-reaper, conductor, conductor-fips, druid...
CVE-2026-69220 vulnerabilities
Vulnerabilities for packages: zipkin, logstash, logstash-fips, thingsboard, nuxeo, traccar, cassandra-reaper, conductor, traccar-fips, conductor-fips, druid...
GHSA-5XWG-CFVJ-GFF5 vulnerabilities
Vulnerabilities for packages: zipkin, logstash, logstash-fips, thingsboard, nuxeo, traccar, cassandra-reaper, conductor, traccar-fips, conductor-fips, druid...
CVE-2026-63337 vulnerabilities
Vulnerabilities for packages: zipkin, logstash, logstash-fips, thingsboard, nuxeo, traccar, cassandra-reaper, conductor, traccar-fips, conductor-fips, druid...
GHSA-9R55-P3JW-V652 vulnerabilities
Vulnerabilities for packages: busybox...
