415 matches found
CVE-2026-40179 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope, minio-object-browser, trillian, keda, telegraf, mc, splunk-otel-collector, tempo, prometheus-pushgateway, minio-operator, aws-otel-collector, certificate-transparency, karma, jaeger, cloud-sql-proxy, istio, mcp-grafana, loki, datadog-agent, minio...
GHSA-VFFH-X6R8-XX99 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope, minio-object-browser, trillian, keda, telegraf, mc, splunk-otel-collector, tempo, prometheus-pushgateway, minio-operator, aws-otel-collector, certificate-transparency, karma, jaeger, cloud-sql-proxy, istio, mcp-grafana, loki, datadog-agent, minio...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: hubble, kubewatch, omni-fips, supercronic, flux-source-controller, aws-privateca-issuer-fips, podinfo-fips, dataplaneapi, aws-privateca-issuer, flux-operator, aws-iam-authenticator, atlas-fips, flux, victoriametrics-cluster-fips, k8s-metacollector-fips, nemo, tempora...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: hubble, kubewatch, omni-fips, supercronic, flux-source-controller, aws-privateca-issuer-fips, podinfo-fips, dataplaneapi, aws-privateca-issuer, flux-operator, aws-iam-authenticator, atlas-fips, flux, victoriametrics-cluster-fips, k8s-metacollector-fips, nemo, tempora...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: lvm-driver, harbor-registry-fips, apko-fips, omni-fips, mcp-grafana, nats, cloud-provider-gcp-cloud-controller-manager-fips, terraform-provider-random-fips, addon-resizer, crossplane-provider-aws-servicediscovery-fips, aws-efs-csi-driver, rancher-fleet-fips,...
CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0
Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
UBUNTU-CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
CVE-2026-25236 affects the PEAR PHP framework. The vulnerability is a SQL injection risk in karma queries caused by unsafe literal substitution for an IN (...) list. Root cause: unsafe literal handling in Karma DAMBLAN-related queries prior to version 1.33.0. Impact: potential SQL injection. Miti...
EUVD-2026-5199
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
PT-2026-6285
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2020-7626
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...