979 matches found
CVE-2026-56213 Capgo - Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPC
Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsertversionmeta SECURITY DEFINER function exposed via PostgREST RPC, allowing unauthenticated attackers to insert arbitrary rows into versionmeta for any appid. Attackers can exploit this by calling the RPC...
EUVD-2026-36641
Grafana Operator: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName...
GHSA-VXR8-FQ34-VVX9 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, langfuse, langfuse-fips, nextcloud-server, opensearch-dashboards, librechat, wazuh-dashboard-fips, kibana...
GHSA-7C78-JF6Q-G5CM vulnerabilities
Vulnerabilities for packages: authentik-fips, prism, wazuh-dashboard, authentik, opensearch-dashboards, pulumi, lerna, arangodb, vitess, wazuh-dashboard-fips, saf, opensearch-dashboards-fips...
CVE-2026-49982 vulnerabilities
Vulnerabilities for packages: authentik-fips, prism, wazuh-dashboard, authentik, opensearch-dashboards, pulumi, lerna, arangodb, vitess, wazuh-dashboard-fips, saf, opensearch-dashboards-fips...
GHSA-VXR8-FQ34-VVX9 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse, nextcloud-server...
CVE-2026-49982 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, saf, pulumi, vitess, prism, lerna...
GHSA-7C78-JF6Q-G5CM vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, saf, pulumi, vitess, prism, lerna...
Duplicate Advisory: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fcw4-wwqm-m8cf. This link is maintained to preserve external references. Original Description We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity security fix for a...
GHSA-V82C-5C2Q-HX9G Duplicate Advisory: Privilege escalation from namespace admin to cluster admin via GrafanaDashboard jsonnetLib fileName
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fcw4-wwqm-m8cf. This link is maintained to preserve external references. Original Description We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity security fix for a...
CVE-2026-11769
We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templating...
CVE-2026-11769 Operator - Namespaced User Path Traversal
We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templating...
CVE-2026-11769
Grafana Operator
CVE-2026-11769 Operator - Namespaced User Path Traversal
We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templating...
GHSA-HFXV-24RG-XRQF vulnerabilities
Vulnerabilities for packages: kubeflow-katib, nextcloud-server...
CVE-2026-44487 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, nextcloud-server...
CVE-2026-44495 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, nextcloud-server...
CVE-2026-44496 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, nextcloud-server...