1158618 matches found
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationRuntime and IntegrationServer operands that use Kafka are vulnerable to loss of confidentiality (CVE-2025-27817, CVE-2025-27818)
Summary Apache Kafka Client is used by IBM App Connect Enterprise Certified Container when running flows that connect to a Kafka server. IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use Kafka Client are vulnerable to loss of confidentiality...
GHSA-WFQ4-36M3-9G42 Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution
Impact The matrix-sdk-crypto crate before 0.16.1 is missing a check for the sender's user ID when decrypting an Olm-encrypted to-device message containing the senderdevicekeys property. This could be exploited to spoof the sender of an encrypted to-device message, but only if the attacker collude...
Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution
Impact The matrix-sdk-crypto crate before 0.16.1 is missing a check for the sender's user ID when decrypting an Olm-encrypted to-device message containing the senderdevicekeys property. This could be exploited to spoof the sender of an encrypted to-device message, but only if the attacker collude...
SmartMES-Range
SmartMES Attack-Defense Drill Site The Smart Manufacturing En...
GHSA-FQ7H-9X26-6J22 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GHSA-WV26-88M5-6H59 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
CVE-2026-42875 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
CVE-2026-42876 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GHSA-W2Q5-6Q6X-X959 vulnerabilities
Vulnerabilities for packages: terraform-provider-pagerduty, vcluster, delve, knative-eventing, flux-image-reflector-controller, kserve-modelmesh-serving, gitaly, ipfs-cluster, restic, victoriametrics, percona-server-mongodb-operator, verticadb-operator, atlantis, opencost, kubewatch,...
CVE-2026-39821 vulnerabilities
Vulnerabilities for packages: terraform-provider-pagerduty, vcluster, delve, knative-eventing, flux-image-reflector-controller, kserve-modelmesh-serving, gitaly, ipfs-cluster, restic, victoriametrics, percona-server-mongodb-operator, verticadb-operator, atlantis, opencost, kubewatch,...
GHSA-H524-452V-82P9 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, cluster-proportional-autoscaler, vcluster, rancher-webhook, tigera-operator, containerd, go, flux-image-reflector-controller, promxy, crossplane-provider-aws-cloudformation, apisix-ingress-controller, stakater-reloader, flyte, crossplane,...
CVE-2026-42504 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, cluster-proportional-autoscaler, vcluster, rancher-webhook, tigera-operator, containerd, go, flux-image-reflector-controller, promxy, crossplane-provider-aws-cloudformation, apisix-ingress-controller, stakater-reloader, flyte, crossplane,...
GHSA-H3GM-Q7M7-MP28 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, cluster-proportional-autoscaler, vcluster, rancher-webhook, kbld, ksops, tigera-operator, containerd, go, delve, guac, temporal-ui-server, sftpgo-plugin-eventstore, gostatsd, flux-image-reflector-controller, azcopy, octo-sts, promxy,...
CVE-2026-27145 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, cluster-proportional-autoscaler, vcluster, rancher-webhook, kbld, ksops, tigera-operator, containerd, go, delve, guac, temporal-ui-server, mongo-tools, sftpgo-plugin-eventstore, gostatsd, flux-image-reflector-controller, azcopy, octo-sts, promxy...
CVE-2026-42507 vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, cluster-proportional-autoscaler, vcluster, rancher-webhook, kbld, ksops, tigera-operator, containerd, go, delve, guac, temporal-ui-server, sftpgo-plugin-eventstore, gostatsd, flux-image-reflector-controller, azcopy, octo-sts, promxy,...
GHSA-4279-Q6MJ-392R vulnerabilities
Vulnerabilities for packages: cloud-provider-azure, cluster-proportional-autoscaler, vcluster, rancher-webhook, kbld, ksops, tigera-operator, containerd, go, delve, guac, temporal-ui-server, mongo-tools, sftpgo-plugin-eventstore, gostatsd, flux-image-reflector-controller, azcopy, octo-sts, promxy...
CVE-2026-10860 MISP CRUDComponent delete validation bypass via operator precedence error
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
CVE-2026-10860 MISP CRUDComponent delete validation bypass via operator precedence error
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
CVE-2026-10860 MISP CRUDComponent delete validation bypass via operator precedence error
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
