CVE-2025-30374

CVE-2025-30374 Vulnerabilità di Class Pollution in Taipy che porta a RCE, XSS, DoS e perdita di credenziali Sintesi Una vulnerabilità di class pollution è stata identificata in Taipy v4.0.3 l'ultima versione al momento della scoperta. Questa vulnerabilità consente ad attaccanti non autorizzati di...

PT-2026-53450

Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like securityContext and inject multi-document YAML to create additional unintended Kubernetes resources. Details The server interpolates...

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like securityContext and inject multi-document YAML to create additional unintended Kubernetes resources. Details The server interpolates...