Lucene search
K

65 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 10:3 a.m.2 views

Malicious code in linode-developers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55911ad2b0d383d30b5cd3daeec59c9f4419c01231c45fe9813e1b7ff7260e13 The package linode-developers was found to contain malicious code...

5.7AI score
Exploits0
OSV
OSV
added 2026/04/16 10:3 a.m.2 views

MAL-2026-2777 Malicious code in linode-developers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55911ad2b0d383d30b5cd3daeec59c9f4419c01231c45fe9813e1b7ff7260e13 The package linode-developers was found to contain malicious code...

5.7AI score
Exploits0
SUSE CVE
SUSE CVE
added 2026/03/25 12:26 a.m.2 views

SUSE CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS6.1AI score0.00014EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/27 4:13 a.m.1 views

CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS5.5AI score0.00014EPSS
Exploits0References1
OSV
OSV
added 2026/02/27 2:17 a.m.1 views

GO-2026-4562 Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure in github.com/linode/terraform-provider-linode

Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure in github.com/linode/terraform-provider-linode...

7.7CVSS5.8AI score0.00014EPSS
Exploits0References6
EUVD
EUVD
added 2026/02/26 8:0 p.m.2 views

EUVD-2026-8798

Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure...

5CVSS5.2AI score0.00014EPSS
Exploits0References6
OSV
OSV
added 2026/02/26 8:0 p.m.3 views

GHSA-5RC7-2JJ6-MP64 Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure

Impact The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, object storage data, and NodeBalancer TLS keys in debug logs without redaction. Important: Provider debug logging is not enabled by default. This issue is...

5CVSS5.7AI score0.00014EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/02/26 8:0 p.m.5 views

Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure

Impact The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, object storage data, and NodeBalancer TLS keys in debug logs without redaction. Important: Provider debug logging is not enabled by default. This issue is...

7.7CVSS5.6AI score0.00014EPSS
Exploits0References7Affected Software3
Snyk
Snyk
added 2026/02/26 3:13 a.m.1 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.2 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.1 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.0 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS5.9AI score0.00014EPSS
Exploits0References2
NVD
NVD
added 2026/02/26 2:16 a.m.3 views

CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS0.00014EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/26 12:53 a.m.2 views

CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS5.5AI score0.00014EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2026/02/26 12:53 a.m.2 views

CVE-2026-27900 Terraform Provider Debug Logs Vulnerable to Sensitive Information Exposure

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

5CVSS5.7AI score0.00014EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/02/26 12:53 a.m.18 views

CVE-2026-27900 Terraform Provider Debug Logs Vulnerable to Sensitive Information Exposure

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

5CVSS0.00014EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/26 12:53 a.m.3 views

CVE-2026-27900 Terraform Provider Debug Logs Vulnerable to Sensitive Information Exposure

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

5CVSS5.5AI score0.00014EPSS
Exploits0References4
CVE
CVE
added 2026/02/26 12:53 a.m.6 views

CVE-2026-27900

CVE-2026-27900 affects the Terraform Provider for Linode. Affected: versions prior to 3.9.0. Root cause: debug logs can expose sensitive data (passwords, StackScript content, object storage data) when debug/provider logging is explicitly enabled. The issue only occurs if debug logging is turned o...

7.7CVSS5.5AI score0.00014EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.3 views

Terraform Provider for Linode 安全漏洞

Terraform Provider for Linode is an open-source plugin developed by Linode. Versions of Terraform Provider for Linode prior to version 3.9.0 contained a security vulnerability. This vulnerability stemmed from the fact that debug logs did not anonymize sensitive information, which could lead to...

7.7CVSS7.3AI score0.00014EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.4 views

PT-2026-22075

Name of the Vulnerable Software and Affected Versions Terraform Provider for Linode versions prior to 3.9.0 Description The Terraform Provider for Linode logged sensitive information, including passwords, StackScript content, and object storage data, in debug logs without redaction. This issue is...

9.9CVSS5.8AI score0.07313EPSS
Exploits68References146
Rows per page
Query Builder