1023 matches found
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: gatekeeper, cilium-cli, crossplane-provider-azure-operationalinsights, crossplane-provider-azure-sql, crossplane-provider-aws-vpc-fips, crossplane-provider-aws-secretsmanager, crossplane-provider-azure-storagesync, step-kms-plugin-fips,...
GO-2026-5340 Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) in github.com/getarcaneapp/arcane/backend
Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content incl. .env secrets in github.com/getarcaneapp/arcane/backend...
GO-2026-5308 Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend
Arcane Has an Authenticated Arbitrary Host File Read via Docker Compose Include Directives in github.com/getarcaneapp/arcane/backend...
Astra Linux – Vulnerability in docker.io-app
Docker Compose relies on the path information embedded in remote OCI Compose artifacts. When a layer includes the annotations com.dockercompose.extends or com.dockercompose.envfile, Compose incorporates the value provided by the attacker from com.dockercompose.file/com.dockercompose.envfile into...
CVE-2026-53492 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, containerd, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx,...
GHSA-33VJ-92QQ-66HC vulnerabilities
Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, containerd, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx,...
GHSA-CVXM-645Q-P574 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, containerd, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx,...
CVE-2026-53489 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, containerd, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx,...
CVE-2026-50195 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, containerd, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx,...
GHSA-XHF5-7WJV-PQXP vulnerabilities
Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx, google-osconfig-agent...
GHSA-JPCC-P29G-P8MQ vulnerabilities
Vulnerabilities for packages: neuvector-scanner, rancher-agent, gatekeeper, helm-exporter, newrelic-infrastructure-agent-fips, gitlab-rails-ce, kubescape-operator, k9s-fips, neuvector-fips, helm-push, datadog-agent, docker-cli-buildx-fips, consul-k8s-fips, docker-cli-buildx, google-osconfig-agent...
AVideo Vulnerable to Unauthenticated .env File Exposure via Official Docker Compose Configuration
Vulnerability Details CWE: CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or Directory The official docker-compose.yml line 61 mounts the entire project root directory as the Apache document root: yaml volumes: - "./:/var/www/html/AVideo" This causes the .env file —...
GHSA-WF69-R4MX-43RR AVideo Vulnerable to Unauthenticated .env File Exposure via Official Docker Compose Configuration
Vulnerability Details CWE: CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or Directory The official docker-compose.yml line 61 mounts the entire project root directory as the Apache document root: yaml volumes: - "./:/var/www/html/AVideo" This causes the .env file —...
Files or Directories Accessible to External Parties
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the official Docker Compose configuration, which mounts the project root directory as the Apache document...
PT-2026-51433
Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description AVideo exposes sensitive .env files to unauthenticated users when deployed using the official Docker compose configuration. The docker-compose.yml file mounts the entire project root directory as the...
CVE-2026-21768
The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...
CVE-2026-21768
The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...
CVE-2026-21768 HCL Verse for Android is susceptible to an injection vulnerability
The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...
EUVD-2026-38035
The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...
CVE-2026-21768
CVE-2026-21768 affects the compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android. The vulnerability arises from improper validation of HTML input in the rich text editor, enabling execution of malicious content in certain scenarios. According to NVD, CVSSv3.1 base score is 6.3 (...