glue

OWASP Glue Glue is a framework for running a series of tools. Generally, it is intended as a backbone for automating a security analysis pipeline of tools. Recommended Usage For those wishing to run Glue, we recommend using the docker image because it should have the other tools it uses available...

CVE-2026-119301

Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas also published as awswrangler 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any tab...

EUVD-2026-115329

Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas also published as awswrangler 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any tab...

PT-2026-135534

Name of the Vulnerable Software and Affected Versions AWS SDK for pandas awswrangler versions 3.5.2 through 3.17.0 Description Improper neutralization of quoting syntax in SQL identifier construction within the Apache Iceberg write component allows an authenticated remote user with permissions to...

CVE-2026-26718

Description Summary A Cross-Site Request Forgery CSRF vulnerability exists in the xxl-job-admin web application that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via ...

GO-2026-6860 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-vpclattice, crossplane-provider-aws-lexmodels-fips, crossplane-provider-aws-licensemanager-fips, crossplane-provider-aws-cloudcontrol, ory-kratos, crossplane-provider-aws-emrserverless, crossplane-provider-aws-mediapackage-fips,...

CVE-2026-78661 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-vpclattice, crossplane-provider-aws-lexmodels-fips, crossplane-provider-aws-licensemanager-fips, crossplane-provider-aws-cloudcontrol, ory-kratos, crossplane-provider-aws-emrserverless, crossplane-provider-aws-mediapackage-fips,...

CVE-2026-106706

XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting XSS in the GLUE code editor. JobCodeController.save stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: reset: uniphier-glue: Fix possible null-ptr-deref It will cause a null-ptr-deref when resourcesizeres is invoked, if platformgetresource returns NULL...

SUSE CVE-2026-98416

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3udmagluereleaserxchn If devmkcalloc for rxchn-flows fails in a channel request function, the error path calls k3udmagluereleaserxchn, which dereferences the NULL rxchn-flows...

CVE-2026-106706

XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting XSS in the GLUE code editor. JobCodeController.save stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped...

CVE-2026-106706: Improper Neutralization of Input During Web Page Generation

XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting XSS in the GLUE code editor. JobCodeController.save stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped...

CVE-2026-106706

XXL-JOB versions through 3.5.0-SNAPSHOT are vulnerable to stored cross-site scripting (XSS) within the GLUE code editor . The vulnerability exists because the JobCodeController.save() method stores the user-supplied glueSource parameter without proper output encoding. Subsequently, the FreeMarker...

CVE-2026-106706

XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting XSS in the GLUE code editor. JobCodeController.save stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped...

EUVD-2026-102258

XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting XSS in the GLUE code editor. JobCodeController.save stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped...

PT-2026-115077

XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting XSS in the GLUE code editor. JobCodeController.save stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped...

CVE-2026-106706

XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting XSS in the GLUE code editor. JobCodeController.save stores the user-supplied glueSource parameter without output encoding, and the FreeMarker template job.code.ftl renders the stored value unescaped...

DEBIAN-CVE-2026-98416

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3udmagluereleaserxchn If devmkcalloc for rxchn-flows fails in a channel request function, the error path calls k3udmagluereleaserxchn, which dereferences the NULL rxchn-flows...

CVE-2026-98416

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3udmagluereleaserxchn If devmkcalloc for rxchn-flows fails in a channel request function, the error path calls k3udmagluereleaserxchn, which dereferences the NULL rxchn-flows...

AZL-108180 CVE-2026-98416 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3udmagluereleaserxchn If devmkcalloc for rxchn-flows fails in a channel request function, the error path calls k3udmagluereleaserxchn, which dereferences the NULL rxchn-flows...