408 matches found
CVE-2025-14459 Virt-cdi-controller: unauthorized pvc cloning via dataimportcron
A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...
CVE-2025-14459: Authorization Bypass Through User-Controlled Key
A flaw was found in KubeVirt Containerized Data Importer CDI. This vulnerability allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces, resulting in unauthorized access to data via the DataImportCron PVC source mechanism...
PT-2026-4805
Name of the Vulnerable Software and Affected Versions KubeVirt Containerized Data Importer CDI affected versions not specified Description A flaw exists in KubeVirt Containerized Data Importer CDI that allows a user to clone PersistentVolumeClaims PVCs from unauthorized namespaces. This can lead ...
CVE-2026-24047
Backstage is an open framework for building developer portals, and @backstage/cli-common provides config loading functionality used by the backend and command line interface of Backstage. Prior to version 0.1.17, the resolveSafeChildPath utility function in @backstage/backend-plugin-api, which is...
CVE-2026-24046 Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilities were vulnerable to symlink-based path traversal attacks. An attacker with access to create and execute Scaffolder templates could exploit symlinks to read arbitrary files vi...
PT-2026-3875
Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.12.2, 0.13.2, 0.14.1, and 0.15.0 @backstage/plugin-scaffolder-backend versions prior to 2.2.2, 3.0.2, and 3.1.1 @backstage/plugin-scaffolder-node versions prior to 0.11.2 and 0.12.3 Description The software is...
CVE-2025-65637 affecting package containerized-data-importer for versions less than 1.55.0-27
CVE-2025-65637 affecting package containerized-data-importer for versions less than 1.55.0-27. A patched version of the package is available...
CVE-2025-65637 affecting package containerized-data-importer for versions less than 1.57.0-18
CVE-2025-65637 affecting package containerized-data-importer for versions less than 1.57.0-18. A patched version of the package is available...
CVE-2025-58183 affecting package containerized-data-importer for versions less than 1.57.0-17
CVE-2025-58183 affecting package containerized-data-importer for versions less than 1.57.0-17. A patched version of the package is available...
React-Zero-Day-Exploit-Laboratory
🚨 React Zero-Day Exploit Laboratory Interactive Secur...
AZL-71566 CVE-2025-65637 affecting package containerized-data-importer for versions less than 1.55.0-27
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...
AZL-71513 CVE-2025-65637 affecting package containerized-data-importer for versions less than 1.62.0-1
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...
Wazuh 4.14.1
Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...
Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont
This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.62.0: Release notes:...
AZL-69033 CVE-2025-58183 affecting package containerized-data-importer for versions less than 1.55.0-26
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
AZL-69134 CVE-2025-58183 affecting package containerized-data-importer for versions less than 1.57.0-17
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.57.0-16
CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.57.0-16. A patched version of the package is available...
Wazuh 4.14.0
Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...
CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.55.0-25
CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.55.0-25. A patched version of the package is available...
