1154538 matches found
EUVD-2026-48612
lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...
CVE-2026-66006
lakeFS
OpenAI’s agent escaped its sandbox during a security test
During an internal OpenAI security evaluation, a chain of AI models escaped its sandbox, reached the internet, and then accessed Hugging Face infrastructure to complete the test objective. OpenAI is a leading artificial intelligence AI research and deployment company. Its best-known product is...
LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce
pop filter bypasses memoryLimit accounting that its array-filter siblings enforce CWE: CWE-770 Allocation of Resources Without Limits or Throttling — sibling class of GHSA-8xx9-69p8-7jp3 and GHSA-2546-xv4c-mc8g, applied to memoryLimit instead of renderLimit Summary The pop array filter at...
GHSA-G357-X5C3-C72P LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce
pop filter bypasses memoryLimit accounting that its array-filter siblings enforce CWE: CWE-770 Allocation of Resources Without Limits or Throttling — sibling class of GHSA-8xx9-69p8-7jp3 and GHSA-2546-xv4c-mc8g, applied to memoryLimit instead of renderLimit Summary The pop array filter at...
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence AI agent inside a victim's organization. The vulnerability has bee...
Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...
Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
The threat actors behind the Golden Chickens malware-as-a-service MaaS ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public disclosures into their inner workings. The malware families in question are:...
Security Bulletin: IBM DevOps Loop has multiple vulnerabilities
Summary IBM DevOps Loop v2.0.2 addresses multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-42264 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties auth, baseURL, socketPath,...
CVE-2026-6790 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator-fips, spark, spark-kubernetes-operator-fips, confluent-kafka, traccar-fips, cruise-control, cruise-control-fips, strimzi-kafka-operator, apache-jena-fuseki, spark-kubernetes-operator, traccar, jenkins, akhq, kafka, apache-hop-fips, spark-fips,...
GHSA-W7X5-G22V-XQHR vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator-fips, spark, spark-kubernetes-operator-fips, confluent-kafka, traccar-fips, trino, strimzi-kafka-operator, apache-jena-fuseki, spark-kubernetes-operator, traccar, jenkins, akhq, kafka, apache-hop-fips, spark-fips, dependency-track, neo4j,...
CVE-2026-10051 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator-fips, spark, spark-kubernetes-operator-fips, confluent-kafka, traccar-fips, strimzi-kafka-operator, apache-jena-fuseki, spark-kubernetes-operator, traccar, jenkins, akhq, kafka, apache-hop-fips, spark-fips, dependency-track, neo4j,...
GHSA-F4V5-65JJ-PCR2 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator-fips, spark, spark-kubernetes-operator-fips, confluent-kafka, traccar-fips, strimzi-kafka-operator, apache-jena-fuseki, spark-kubernetes-operator, traccar, jenkins, akhq, kafka, apache-hop-fips, spark-fips, dependency-track, neo4j,...
CVE-2026-8384 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator-fips, spark, spark-kubernetes-operator-fips, confluent-kafka, traccar-fips, trino, strimzi-kafka-operator, apache-jena-fuseki, spark-kubernetes-operator, traccar, jenkins, akhq, kafka, apache-hop-fips, spark-fips, dependency-track, neo4j,...
GHSA-7P3P-8QV8-M2VH vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator-fips, spark, spark-kubernetes-operator-fips, confluent-kafka, traccar-fips, cruise-control, cruise-control-fips, strimzi-kafka-operator, apache-jena-fuseki, spark-kubernetes-operator, traccar, jenkins, akhq, kafka, apache-hop-fips, spark-fips,...
GHSA-4MP9-239F-G9HG vulnerabilities
Vulnerabilities for packages: floci, kafbat-ui, strimzi-kafka-operator-fips, flyway, kayenta, celeborn, nuxeo, apicurio-registry, kayenta-fips, spark, request-9047-keycloak-fips, logstash, camunda-zeebe, opensearch, pinot-fips, spark-kubernetes-operator-fips, apache-activemq-artemis,...
GHSA-GCJF-9MGH-3P7G vulnerabilities
Vulnerabilities for packages: floci, kafbat-ui, strimzi-kafka-operator-fips, flyway, kayenta, celeborn, nuxeo, apicurio-registry, kayenta-fips, spark, request-9047-keycloak-fips, logstash, camunda-zeebe, opensearch, pinot-fips, spark-kubernetes-operator-fips, apache-activemq-artemis,...
CVE-2026-59899 vulnerabilities
Vulnerabilities for packages: floci, kafbat-ui, strimzi-kafka-operator-fips, flyway, kayenta, celeborn, nuxeo, apicurio-registry, kayenta-fips, spark, request-9047-keycloak-fips, logstash, camunda-zeebe, opensearch, pinot-fips, spark-kubernetes-operator-fips, apache-activemq-artemis,...
CVE-2026-56746 vulnerabilities
Vulnerabilities for packages: floci, kafbat-ui, strimzi-kafka-operator-fips, flyway, kayenta, celeborn, nuxeo, apicurio-registry, kayenta-fips, spark, request-9047-keycloak-fips, logstash, camunda-zeebe, opensearch, pinot-fips, spark-kubernetes-operator-fips, apache-activemq-artemis,...
CVE-2026-59900 vulnerabilities
Vulnerabilities for packages: floci, kafbat-ui, strimzi-kafka-operator-fips, flyway, kayenta, celeborn, apicurio-registry, kayenta-fips, spark, request-9047-keycloak-fips, pinot-fips, camunda-zeebe, opensearch, spark-kubernetes-operator-fips, grpc-java-fips, traccar-fips, opensearch-fips,...