9 matches found
CVE-2026-113495
A flaw in cockpit-machines allows for the disclosure of Red Hat Subscription Management (RHSM) authentication tokens. During image retrieval operations, these tokens are passed as command-line arguments to background helper processes. A local, unprivileged attacker capable of cross-user process i...
CVE-2026-113495 Cockpit-machines: rhsm access-token disclosure through image helper command-line arguments
A flaw was found in cockpit-machines. Red Hat Subscription Management RHSM authentication tokens are passed as command-line arguments to background helper processes during image retrieval operations. A local, unprivileged attacker on a system permitting cross-user process inspection can view thes...
@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +23 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)
exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 - @scopieflows/app-image-helper 0.1.12 and more Source cves: CVE-2026-53496 Source advisory: SNYK:JS-EXIFREADER-18016336...
@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.15) +23 more potentially affected by CVE-2026-53496 via exifreader (>=4.1.1, <=4.39.1)
exifreader NPM version =4.1.1, =0.0.5, =1.18.1-dev.1638815480459, =1.0.2, =2.2.8, =2.1.11, =1.0.6, =0.5.0, =4.10.0, =1.0.0-beta.141, =1.0.0-beta.143 - @scopieflows/app-image-helper 0.1.12 and more Source cves: CVE-2026-53496 Source advisory: OSV:GHSA-G77H-45RF-HCX4...
@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.13) +16 more potentially affected by CVE-2026-8814 via exifreader (>=4.20.0, <=4.38.1)
exifreader NPM version =4.20.0, =0.0.5, =1.0.2, =4.10.0, =1.0.0-beta.141, =0.0.8, =0.0.0-unstable.6844005670, =0.0.0-unstable.6844005670, =0.0.0-pre.1, =1.0.0, =1.0.8 and more Source cves: CVE-2026-8814 Source advisory: OSV:GHSA-RR89-W3H9-M66J...
@activeboxes/piece-image-helper (0.1.0), @activepieces/piece-image-helper (>=0.0.5, <=0.1.13) +65 more potentially affected by CVE-2026-8814 via exifreader (>=2.8.2, <=4.38.1)
exifreader NPM version =2.8.2, =0.0.5, =1.8.0-dev.1617120897319, =1.0.2, =1.1.17, =1.0.6, =0.0.17, =4.10.0, =4.10.2 - @juhasztibi/browser-image-resizer 2.2.1 - @longlost/afs-custom-exifreader 1.0.0 and more Source cves: CVE-2026-8814 Source advisory: MEND:CVE-2026-8814...
kubernetes security update
kubernetes 1.25.11-1 - Added Oracle specific build files for Kubernetes olcne 1.6.2-1 - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x 1.6.1-9 - Updated the CVE ID's in Istio-1.16.4 changelog entry 1.6.1-8 - Update Istio...