55 matches found
atproto
Blacksky AppView 这是Blacksky社区对AT协议参考实现（由Bluesky Social PBC开发）的一个分支。它驱动着位于 api.blacksky.community 的 AppView。 我们发布此代码是为了透明，并让其他社区也能从中受益。本仓库不接受贡献、issue 或 PR。 如果你需要规范的 atproto 实现，请使用 bluesky-social/atproto。 不同之处 所有变更都在 packages/bsky（AppView 逻辑）、services/bsky（运行时配置）以及一个自定义迁移文件中。其余部分均与上游保持一致。 为何不使用内置的...
CVE-2021-36749
CVE-2021-36749 Apache Druid: lectura de archivos arbitraria Versiones afectadas: versiones = 0.21.1 Se pueden utilizar los dos métodos siguientes: Método de línea de comandos root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST ...
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: go-discover, newrelic-nri-statsd, smokescreen, kubeflow, php-fpmexporter, hello-world-golang, neuvector-dbgen, sonobuoy, kube-fluentd-operator, src-fingerprint, terraform-provider-google, aws-flb-firehose, aws-flb-kinesis, aws-flb-cloudwatch, gostatsd,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-storage, q, gitlab-pages, crossplane-provider-aws-memorydb, neuvector-scanner, crossplane-provider-aws-sns, kubescape, conftest, crossplane-provider-aws-cloudfront, cri-tools, nri-apache, sigstore-scaffolding,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: kaf, crossplane-provider-azure-storage, gitlab-pages, crossplane-provider-aws-memorydb, crossplane-provider-aws-sns, kubescape, crossplane-provider-aws-cloudfront, loki, crossplane-provider-azure-authorization, falcoctl, prometheus, pulumi-language-dotnet,...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: kaf, gitlab-pages, redka, libnvidia-container, kubescape, nerdctl, coredns, dask-gateway, external-secrets-operator, kubernetes, snyk-cli, external-dns, kine, prometheus, hubble, zot, karpenter, runc, aws-flb-cloudwatch, k8s-device-plugin, fuse-overlayfs-snapshotter,...
CVE-2023-43784
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...
CVE-2025-65637 vulnerabilities
Vulnerabilities for packages: go-discover, newrelic-nri-statsd, smokescreen, kubeflow, php-fpmexporter, hello-world-golang, neuvector-dbgen, sonobuoy, kube-fluentd-operator, src-fingerprint, terraform-provider-google, aws-flb-firehose, aws-flb-kinesis, aws-flb-cloudwatch, gostatsd,...
GHSA-4F99-4Q7P-P3GH vulnerabilities
Vulnerabilities for packages: go-discover, newrelic-nri-statsd, smokescreen, kubeflow, php-fpmexporter, hello-world-golang, neuvector-dbgen, sonobuoy, kube-fluentd-operator, src-fingerprint, terraform-provider-google, aws-flb-firehose, aws-flb-kinesis, aws-flb-cloudwatch, gostatsd,...
GHSA-4F99-4Q7P-P3GH vulnerabilities
Vulnerabilities for packages: kiam, aws-flb-firehose-fips, newrelic-nri-statsd, prometheus-mongodb-exporter-fips, terraform-provider-google, stakater-reloader, src-fingerprint, wavefront-collector-for-kubernetes, kpt, aws-flb-kinesis, aws-flb-kinesis-fips, sonobuoy, hello-world-golang,...
CVE-2025-65637 vulnerabilities
Vulnerabilities for packages: kiam, aws-flb-firehose-fips, newrelic-nri-statsd, prometheus-mongodb-exporter-fips, terraform-provider-google, stakater-reloader, src-fingerprint, wavefront-collector-for-kubernetes, kpt, aws-flb-kinesis, aws-flb-kinesis-fips, sonobuoy, hello-world-golang,...
EUVD-2024-2627
Malicious code in bioql PyPI...
EUVD-2024-30761
Malicious code in bioql PyPI...
CVE-2025-59402
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls...
Flock Safety The Bravo Compute Box 安全漏洞
Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from the acceptance of the default Thundercomm TurboX 6490 Firehose loader, which could lead to ...
CVE-2025-59402
Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls...
PT-2025-39453
Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The Flock Safety Bravo Edge AI Compute Device allows attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader an...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: sbomqs, go-md2man, bazelisk, sftpgo-plugin-kms, aws-flb-kinesis-fips, migrate, cert-manager-cmctl-fips, terraform, aws-flb-cloudwatch, aws-flb-cloudwatch-fips, metrics-server, hubble, k9s, apko, falcoctl, cfssl-fips, gitlab-cng, cloud-provider-azure-fips,...
CVE-2024-45043
The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream messages and parsing the records received based on the configured record type. awsfirehosereceiver allows unauthenticated remote requests, even when configured to require a key...