polaris

Polaris は Kubernetes 向けのオープンソースポリシーエンジンです Polaris は Kubernetes 向けのオープンソースポリシーエンジンで、リソース設定の検証と修正を行います。30以上の組み込み構成ポリシーに加えて、JSON Schema を使用したカスタムポリシーの作成も可能です。コマンドラインまたはミューティング Webhook として実行すると、Polaris はポリシー基準に基づいて問題を自動的に修正できます。 Polaris は次の3つのモードで実行できます: ダッシュボードとして - ポリシーアズコードに基づいて Kubernetes...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

airflowscan

airflowscan Apache Airflow のセキュリティを強化するためのチェックリストおよびツール。 免責事項 このプロジェクトは Apache Foundation および Airflow プロジェクトとは関係がなく 、それらによる推奨も受けていません。 内容 このプロジェクトの目的は、Apache Airflow インストールのセキュリティを強化するツールを提供することです。 このプロジェクトは以下のツールを提供します： 強化設定を含む設定ファイル - hardenedairflow.cfg を参照。 デフォルトインストールの強化のためのセキュリティチェックリスト -...

CVE-2026-77184 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...

CVE-2026-34308

CVE-2026-34308: MySQL Server JSON-Komponente Denial of Service Offizielles Hersteller-Bulletin: Oracle Critical Patch Update Advisory — April 2026. Zusammenfassung aus der veröffentlichten CVE Sicherheitslücke in Oracle MySQL Server Komponente: Server: JSON. Unterstützte betroffene Versionen:...

EUVD-2026-60094

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

CVE-2026-73502

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:02+00:00| published-proof-of-concept| https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq...

CVE-2026-72904

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...

CVE-2026-72904

Firecrawl vulnerability CVE-2026-72904: Affected component is the extraction functionality. Before version 2.11.32, unsafe dereferencing of user-supplied JSON schemas via json-schema-ref-parser allows resolution of external/local file references during schema processing. An authenticated attacker...

CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...

CLSA-2026-1781052738 TuxCare security update for json-schema (3 CVEs)

TuxCare rebuilt json-schema to address 3 CVEs. Fixed in 0.2.3-tuxcare.1...

CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler

Improper Neutralization of Input During Web Page Generation XSS vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler. Oaskit.ErrorHandler.Default.formatreason/4 and Oaskit.ErrorHandler.Default.reasontohtml/1 in lib/oaskit/errorhandler/default.ex...

MongoDB 8.0.x < 8.0.28 / 8.2.x < 8.2.12 / 8.3.x < 8.3.7 Multiple Vulnerabilities (SERVER-125872)

The version of MongoDB installed on the remote host is 8.0.x prior to 8.0.28, 8.2.x prior to 8.2.12, or 8.3.x prior to 8.3.7. It is, therefore, affected by multiple vulnerabilities: - Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU...

CVE-2026-55389

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schema $ref targets in...

CVE-2026-55415

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows attacker-controlled x-python-import or customTypePath schema...

CVE-2026-54690

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.9.1 until 0.61.0, datamodel-code-generator silently dereferences attacker-controlled JSON Schema $ref HTTP or...

CVE-2026-54655

datamodel-code-generator generates Python data models from schema definitions. From 0.51.0 until 0.60.2, x-python-type values parsed by src/datamodelcodegenerator/parser/jsonschema.py in getpythontypeoverride are inserted into generated field annotations without sufficient validation, allowing...

GHSA-8359-H9FX-J6V9 datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`

Summary datamodel-code-generator resolves JSON-Schema $ref targets that point at the local filesystem without restricting them to the input/base directory and without honoring the remote-reference security control. In the default configuration, an attacker who controls an input schema a "paste yo...

CVE-2026-55389

The CVE affects datamodel-code-generator (pre-0.62.0), where JSON Schema $ref resolution in src/datamodel_code_generator/parser/jsonschema.py using is_url/_get_ref_body could read arbitrary local files (via file:// or ../ traversal) when --no-allow-remote-refs is not honored. This could expose se...

EUVD-2026-50078

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schema $ref targets in...