15630 matches found
Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-138 (ALASDOCKER-2026-138)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-138 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extract...
ANT-2026-4YJK1P9J · ffmpeg · Heap-buffer-overflow
heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-4YJK1P9J: Heap-buffer-overflow in dhav.c:286 While...
GHSA-XHGW-QWWF-PG32 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, docker, hubble-ui, prometheus, splunk-otel-collector-fips, falcoctl-fips, cilium, kubescape-server-fips, milvus, gitaly, agentbeat-fips, delve, containerd-fips, hubble-fips, cosmo-router-fips, gitaly-fips, vitess, rke2-runtime-fips, witness,...
CVE-2026-10722 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, docker, hubble-ui, prometheus, splunk-otel-collector-fips, falcoctl-fips, cilium, kubescape-server-fips, milvus, gitaly, agentbeat-fips, delve, containerd-fips, hubble-fips, cosmo-router-fips, gitaly-fips, vitess, rke2-runtime-fips, witness,...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update
An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...
ANT-2026-N6TD9MF6 · runc · Symlink-following
symlink-following medium CVE-2026-41579 GHSA-xjvp-4fhw-gc47 Severity Claude high · Security research firm high · Maintainer medium Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics...
Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-cont
This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...
SUSE-SU-2026:3630-1 Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6
This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...
Critical: Red Hat Security Advisory: Multicluster Global Hub 1.4.8 security update
Multicluster Global Hub v1.4.8 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2025-27771 Uptrain vulnerable to remote code execution via `/add_prompts` endpoint
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...
CVE-2025-27771
In UpTrain versions 0.7.1 and earlier, the /add_prompts endpoint accepts untrusted checks and metadata parameters that are deserialized and evaluated without sanitization, enabling arbitrary Python code execution. An authenticated user can achieve full host compromise (typically the Docker contai...
PT-2026-76685
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.11, POST /api/stripe/webhook, POST /api/creem/webhook, and POST /api/waffo/webhook read and log full request bodies before signature validation in router/api-router.go and the...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100560)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100560 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add...
PT-2026-76687
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /new run endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able...
Exploit for CVE-2026-73519
CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthen...
GHSA-HQVF-45JJ-MCCQ vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: kube-vip, vendir-fips, crossplane-provider-aws-cloudformation, crossplane-provider-aws-scheduler-fips, crossplane-provider-gcp-beta-networksecurity, cluster-autoscaler-fips, crossplane-provider-aws-timestreamwrite, crossplane-provider-azure-keyvault,...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: vcluster, spire-controller-manager, nri-mssql, kubebuilder, kubescape-operator, grpcurl, kserve, timestamp-authority, regclient, neuvector-dbgen, crossplane-provider-aws-cloudfront, cluster-api-azure-controller, opa, sonobuoy, rabbitmq-default-user-credential-updater...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: vcluster, spire-controller-manager, nri-mssql, kubebuilder, kubescape-operator, grpcurl, kserve, timestamp-authority, regclient, neuvector-dbgen, crossplane-provider-aws-cloudfront, nri-postgresql, cluster-api-azure-controller, opa, sonobuoy,...