atproto

Blacksky AppView This is Blacksky's fork of the AT Protocol reference implementation by Bluesky Social PBC. It powers the AppView at api.blacksky.community. We're publishing this for transparency and so other communities can benefit from the work. This repository is not accepting contributions,...

CVE-2021-36749

CVE-2021-36749 Apache Druid Arbitrary File Read Affected versions: version = 0.21.1 Either of the following two methods can be used Command Line Method root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

CVE-2026-32641

Parseable , a log analytics platform for high-volume data ingestion, is affected by an unauthenticated denial-of-service vulnerability in versions prior to 3.0.0 . The root cause is an unchecked unwrap() call in src/handlers/http/middleware.rs while parsing the x-amz-firehose-common-attributes he...

CVE-2026-32641 Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware

Parseable is a log analytics platform built for high-volume data ingestion and analysis. Prior to 3.0.0, src/handlers/http/middleware.rs uses unwrap while parsing the x-amz-firehose-common-attributes header before authentication. A remote unauthenticated attacker can supply non-UTF-8 header data,...

GO-2025-4188 vulnerabilities

Vulnerabilities for packages: go-discover, aws-flb-kinesis, neuvector-dbgen, newrelic-nri-statsd, smokescreen, sonobuoy, aws-flb-firehose, gostatsd, kpt, kube-fluentd-operator, aws-flb-cloudwatch, hello-world-golang, php-fpmexporter, src-fingerprint, terraform-provider-google, kubeflow,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: istio, kubernetes-csi-external-provisioner, step-ca, temporal-ui-server, crossplane-provider-aws-cloudformation, gke-gcloud-auth-plugin, crossplane-provider-aws-s3, calico, golangci-lint, volume-modifier-for-k8s, cert-exporter, gatus, helm, flux, jitsucom-bulker, src...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: flux-source-controller, istio, minio, caddy, step, falcoctl, crossplane-provider-aws-cloudformation, crossplane-provider-aws-s3, gatus, helm, flux, src, cloud-provider-aws, tflint, crossplane-provider-aws-kinesis, guac, chezmoi, steampipe, spire-server,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: istio, nerdctl, newrelic-fluent-bit-output, external-dns, external-secrets-operator, zot, karpenter, kube-fluentd-operator, libnvidia-container, aws-flb-cloudwatch, helm, k3s, flux, cloud-provider-aws, snyk-cli, kubernetes, chezmoi, prometheus, aws-flb-firehose, aact...

CVE-2023-43784

Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: go-discover, aws-flb-kinesis, neuvector-dbgen, newrelic-nri-statsd, smokescreen, sonobuoy, aws-flb-firehose, gostatsd, kpt, kube-fluentd-operator, aws-flb-cloudwatch, hello-world-golang, php-fpmexporter, src-fingerprint, terraform-provider-google, kubeflow,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: go-discover, aws-flb-kinesis, neuvector-dbgen, newrelic-nri-statsd, smokescreen, sonobuoy, aws-flb-firehose, gostatsd, kpt, kube-fluentd-operator, aws-flb-cloudwatch, hello-world-golang, php-fpmexporter, src-fingerprint, terraform-provider-google, kubeflow,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: go-discover-fips, stakater-reloader, terraform-provider-google, smokescreen, kubeflow, prometheus-mongodb-exporter-fips, src-fingerprint, aws-flb-kinesis-fips, aws-flb-firehose, wavefront-collector-for-kubernetes, aws-flb-firehose-fips, consul-fips,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: go-discover-fips, stakater-reloader, terraform-provider-google, smokescreen, kubeflow, prometheus-mongodb-exporter-fips, src-fingerprint, aws-flb-kinesis-fips, aws-flb-firehose, wavefront-collector-for-kubernetes, aws-flb-firehose-fips, consul-fips,...

EUVD-2024-2627

Malicious code in bioql PyPI...

EUVD-2024-30761

Malicious code in bioql PyPI...

CVE-2025-59402

Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls...

Flock Safety The Bravo Compute Box 安全漏洞

Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from the acceptance of the default Thundercomm TurboX 6490 Firehose loader, which could lead to ...

CVE-2025-59402

Flock Safety Bravo Edge AI Compute Device BRAVO00.00local20241017 accepts the default Thundercomm TurboX 6490 Firehose loader in EDL/QDL mode. This enables attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader and OS security controls...

PT-2025-39453

Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The Flock Safety Bravo Edge AI Compute Device allows attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader an...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, gotenberg, blob-csi-fips, spicedb, neuvector, opentofu-fips, argo-cd, aws-flb-firehose-fips, harbor-registry, skopeo, tofu-controller, promxy, amazon-ssm-agent-fips, cert-manager-istio-csr, grafana-operator-fips,...