1153849 matches found
GHSA-X2F5-4PRF-W687 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, pact-broker-docker, logstash...
CVE-2026-54171 vulnerabilities
Vulnerabilities for packages: kube-logging-operator...
CVE-2026-54696 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, pact-broker-docker, logstash...
GHSA-48RX-C7PG-Q66R vulnerabilities
Vulnerabilities for packages: kube-logging-operator...
GHSA-Q4F6-JM68-57WW vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
CVE-2026-56746 vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
GHSA-6CQP-G7GG-8HR5 vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
GHSA-6JQX-86GH-F27W vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
GHSA-4MP9-239F-G9HG vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
CVE-2026-59899 vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
CVE-2026-55831 vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
CVE-2026-59898 vulnerabilities
Vulnerabilities for packages: akhq, management-api-for-apache-cassandra-5.0, flyway, apache-nifi, neo4j, apache-pulsar, strimzi-kafka-operator, apicurio-registry, infinispan, apache-activemq-artemis, wavefront-proxy, thingsboard, cloudwatch-exporter, tez...
MAL-2026-11054 Malicious code in app-node-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4 The package's postinstall script test.js executes multiple installer-side attacks on npm install. It recursively walks the installation working...
Malicious code in app-node-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4 The package's postinstall script test.js executes multiple installer-side attacks on npm install. It recursively walks the installation working...
Incorrect Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization through the executeautomation process and the model access control logic. An attacker can continue to execute scheduled automations and consume operator resources by leveraging a...
CVE-2026-54422
A flaw was found in OpenStack ironic-python-agent's bootc container deployment support. During bootc image deployment, the OCI registry pull secret was exposed to tenant-controlled container code running with host PID namespace visibility. A malicious bootc container image could read the operator...
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie
Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie CVE-2026-55602, CVE-2026-53550, CVE-2026-48710, CVE-2026-48817, CVE-2026-48818, CVE-2026-54282, CVE-2026-54283, CVE-2026-13676, CVE-2026-12208, CVE-2026-13149, CVE-2026-5988...
CVE-2026-66006
lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...
BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an active phishing kit to impersonate the videoconferencing platforms in social engineering campaigns designed to deliver malware. "BlueNoroff ha...
CVE-2026-66006 lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs
lakeFS through 1.83.0, fixed in commit 71a45ee, contains an authentication bypass vulnerability in the /setupcommprefs endpoint that allows unauthenticated attackers to overwrite operator metadata including email, name, and company after setup completion. Attackers can POST to this endpoint to...