django-DefectDojo v3.2.400

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...

AZL-99207 CVE-2026-78662 affecting package docker-compose for versions less than 2.27.0-14

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99210 CVE-2026-56855 affecting package docker-compose for versions less than 2.27.0-14

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

EUVD-2026-63905

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the caller. A client can therefore name...

CVE-2026-77776: Authorization Bypass Through User-Controlled Key

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai.py, including the chat completion and websocket paths, and nothing binds the value to the caller. A client can therefore name...

Project-Ronin

Project Ronin Documentation Hub Welcome to the technical doc...

django-DefectDojo v3.2.201

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...

ANT-2026-6FH6D5TF · supabase/supabase · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6FH6D5TF: Hardcoded Realtime tenant-credential encryption key with no override In docker/docker-compose.yml the...

aquila-graph-poc

Aquila Graph POC A reproducible proof of concept for combinin...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: docker-compose, docker-compose-fips, kubescape...

GO-2025-3699 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, docker-compose-fips, neuvector, docker-compose, neuvector-fips...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, zot, livekit-cli, osv-scanner, trivy-operator-fips, podman-fips, docker-fips, kubescape-server-fips, kubescape, cloudbeat, cloudbeat-fips, guac, trivy-fips, trivy-operator, trivy, conftest-fips, kaniko-fips, skaffold-fips, podman, conftest,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: beats, grafana-fips, tkn-fips, kyverno-notation-aws-fips, beats-fips, rancher-security-scan, pluto-fips, neuvector-sigstore-interface-fips, grafana, bank-vaults, kyverno, k9s-fips, boring-registry-fips, ratify-fips, docker-compose-fips, istio-fips, mattermost-fips,...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: metrics-server, temporal-server, envoy-ratelimit, k3s, rancher-webhook-fips, kube-oidc-proxy, temporal-server-fips, kubescape, prometheus-adapter-fips, volume-modifier-for-k8s, prometheus-adapter, kubevela, temporal, kubernetes-csi-external-resizer,...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape...

GO-2025-3699 vulnerabilities

Vulnerabilities for packages: docker-compose, neuvector-scanner...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: buildah, scorecard, docker-cli-buildx, docker-compose, skaffold, zot, kubescape, conftest, osv-scanner, podman, trivy, guac, kaniko, trivy-operator...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: buildah, scorecard, docker-cli-buildx, docker-compose, skaffold, zot, kubescape, conftest, osv-scanner, podman, trivy, guac, kaniko, trivy-operator...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: syft, melange, docker-compose, policy-controller, helm-push, buf, grype, dagger, k3d, neuvector-scanner, wolfictl, kaniko, cri-tools, harbor-scanner-trivy...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: syft, buildah, docker-cli-buildx, grype, dagger, buildkitd, melange, docker-compose, aws-otel-collector, goreleaser, buf, openfga, falcoctl, nerdctl, tw, splunk-otel-collector, opentelemetry-collector-contrib, spire-server, trufflehog, kargo, cadvisor, trivy, wolfict...