1155982 matches found
GHSA-5GVW-P9QM-JGWH vulnerabilities
Vulnerabilities for packages: spark-fips, ruby3.3-jrjackson, airbyte-server, elasticsearch-fips, airbyte-server-fips, camunda-zeebe, cassandra-fips, druid, confluent-kafka, spark, cassandra, camunda, wavefront-proxy, flyway, jenkins, apache-activemq-fips, s3proxy-fips, confluent-kafka-jre-bcfips,...
CVE-2026-59889 vulnerabilities
Vulnerabilities for packages: spark-fips, ruby3.3-jrjackson, airbyte-server, elasticsearch-fips, airbyte-server-fips, camunda-zeebe, cassandra-fips, druid, confluent-kafka, spark, cassandra, camunda, wavefront-proxy, flyway, jenkins, apache-activemq-fips, s3proxy-fips, confluent-kafka-jre-bcfips,...
CVE-2026-62290 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, redpanda-operator, cert-manager-google-cas-issuer, step-issuer, percona-xtradb-cluster-operator, aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns-fips, cert-manager-istio-csr, athenz-csi-driver, cert-manager-csi-driver-fips...
GHSA-JPJM-C3R5-Q96R vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-apigatewayv2-fips, openfga, prometheus-operator, kyverno-notation-aws, crossplane-provider-aws-emrserverless, crossplane-provider-aws-mq-fips, op-geth, crossplane-provider-aws-location-fips, conftest, crossplane-provider-aws-timestreamwrite,...
CVE-2026-56852 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-apigatewayv2-fips, openfga, prometheus-operator, kyverno-notation-aws, crossplane-provider-aws-emrserverless, crossplane-provider-aws-mq-fips, op-geth, crossplane-provider-aws-location-fips, conftest, crossplane-provider-aws-timestreamwrite,...
GHSA-HRXH-6V49-42GF vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, vault-config-operator, metallb-fips, bank-vaults, verticadb-operator, dbmate, nvidia-container-toolkit-fips, osv-scanner, crossplane-provider-aws-amplify, harvester, certificate-transparency-fips, crossplane-provider-aws-efs,...
GHSA-5GVW-P9QM-JGWH vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, thingsboard, infinispan, opensearch, ruby3.3-jrjackson, gradle, tez, sonarqube, spark, apache-nifi, flyway, apache-tika, cassandra, druid, logstash, zookeeper, jenkins-plugin-manager, akhq, ruby3.2-jrjackson, scala, wavefront-proxy,...
CVE-2026-59889 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, thingsboard, infinispan, opensearch, ruby3.3-jrjackson, gradle, tez, sonarqube, spark, apache-nifi, flyway, apache-tika, cassandra, druid, logstash, zookeeper, jenkins-plugin-manager, akhq, ruby3.2-jrjackson, scala, wavefront-proxy,...
GHSA-HRXH-6V49-42GF vulnerabilities
Vulnerabilities for packages: rancher-helm, ferretdb, k8sgpt, kubeflow, flux-source-controller, cerbos, grafana-mimir, azuredisk-csi, timestamp-authority, velero-plugin-for-microsoft-azure, tofu-controller, trufflehog, cloud-provider-gcp-cloud-controller-manager, fulcio, authservice, trillian,...
GHSA-JPJM-C3R5-Q96R vulnerabilities
Vulnerabilities for packages: rancher-helm, ferretdb, k8sgpt, azurefile-csi, rancher-telemetry, pdfcpu, containerd, flux-source-controller, kubernetes-csi-external-snapshotter, kubernetes-dashboard-auth, cluster-api-aws-controller, dbmate, nuclei, kubescape-operator, snyk-cli, atlantis,...
CVE-2026-56852 vulnerabilities
Vulnerabilities for packages: rancher-helm, ferretdb, k8sgpt, azurefile-csi, rancher-telemetry, pdfcpu, containerd, flux-source-controller, kubernetes-csi-external-snapshotter, kubernetes-dashboard-auth, cluster-api-aws-controller, dbmate, nuclei, kubescape-operator, snyk-cli, atlantis,...
CVE-2026-13065
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...
UBUNTU-CVE-2026-13065
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...
CVE-2026-13065
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...
CVE-2026-13064 MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...
CVE-2026-13064 MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...
CVE-2026-13064 MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...
MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...
CVE-2026-13065 MongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...
EUVD-2026-47796
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...