io.quarkus:quarkus-keycloak-authorization (1.13.4.final), io.quarkus:quarkus-keycloak-authorization-deployment (1.13.4.final) +3 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (1.13.4.final)

io.quarkus:quarkus-oidc MAVEN version 1.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-authorization 1.13.4.final -...

io.quarkus:quarkus-keycloak-authorization (1.13.7.final), io.quarkus:quarkus-keycloak-authorization-deployment (1.13.7.final) +3 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (1.13.7.final)

io.quarkus:quarkus-oidc MAVEN version 1.13.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-oidc and may be impacted: - io.quarkus:quarkus-keycloak-authorization 1.13.7.final -...

lambda-tek.com Cross Site Scripting vulnerability OBB-3715257

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

io.quarkus:quarkus-amazon-lambda-http (1.2.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.2.0.cr1) +49 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.2.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.2.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.3.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.cr1) +51 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.3.0.cr2), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.cr2) +51 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.0.cr2)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.0.cr2 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.7.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.0.cr1) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.7.0.cr2), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.0.cr2) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.0.cr2)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.0.cr2 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.7.3.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.3.final) +69 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.3.final -...

io.quarkus:quarkus-amazon-lambda-http (1.7.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.4.final) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.4.final -...

io.quarkus:quarkus-amazon-lambda-http (1.8.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.8.0.cr1) +70 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.8.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.8.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.10.1.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.10.1.final) +72 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.10.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.10.1.final -...

io.quarkus:quarkus-amazon-lambda (0.11.0), io.quarkus:quarkus-elytron-security (0.11.0) +10 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (0.11.0)

io.quarkus:quarkus-undertow MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-amazon-lambda 0.11.0 - io.quarkus:quarkus-elytron-security 0.11.0 -...

io.quarkus:quarkus-amazon-lambda (0.13.0), io.quarkus:quarkus-amazon-lambda-deployment (0.13.0) +23 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (0.13.0)

io.quarkus:quarkus-undertow MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-amazon-lambda 0.13.0 - io.quarkus:quarkus-amazon-lambda-deployment 0.13.0 -...

Malware in send-orchestrator-event-lambda

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

lambda-tek.com Cross Site Scripting vulnerability OBB-3682950

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Risk Fact #4: Malware in your Cloud means Exploitation is underway

Qualys Blog Series – 2023 TotalCloud Security Insights by the Threat Research Unit The 2023 TotalCloud Security Insights report from the Qualys Threat Research Unit TRU provides research insights, best practices, and detailed recommendations organized by five separate Risk Facts. The insights wil...

This Week in Spring - August 1st, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! Can you believe it's already August 1, 2023??? Me either. As I write this, I'm preparing some of my contributions for SpringOne at VMWare Explore 2023, happening next month in lovely Las Vegas, NV. Have you registered yet? I'...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

lambda-tek.de Cross Site Scripting vulnerability OBB-3536157

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...