76 matches found
CVE-2022-27251
CVE-2022-27251 تنفيذ التعليمات البرمجية عن بُعد في LocalStack 0.12.6 بسبب عدم تعقيم مدخلات المستخدم في حقل معالج Lambda API أثناء إنشاء دوال Lambda، والطريقة غير الآمنة التي تُنشأ بها حاويات Docker، يمكن حقن أمر عبر AWS CLI في خيار --handler ليتم تنفيذه بواسطة عملية root أثناء إنشاء وتشغيل حاويات...
cicd-goat
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...
GO-2026-6093 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-HQVF-45JJ-MCCQ vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-18654 vulnerabilities
Vulnerabilities for packages: localstack...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: victorialogs, pluto, loki-fips, victoriametrics-fips, aws-load-balancer-controller-fips, grafana-operator-fips, localstack, flux-image-automation-controller, nova-fips, go, steampipe, polaris, flux-operator-fips, amazon-k8s-cni-fips, victorialogs-fips, dkron,...
CVE-2026-13769 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-464C-974J-9XM6 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-WFP6-F47H-HXC3 vulnerabilities
Vulnerabilities for packages: localstack...
EUVD-2026-48434
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
CVE-2026-16763 affects localstack serverless-localstack up to version 1.4.0. The vulnerability targets an unknown function in src/index.js of the Configuration Handler, where manipulating the argument custom.localstack.docker.compose_file enables local OS command injection. The CVE describes loca...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
PT-2026-64183
Name of the Vulnerable Software and Affected Versions localstack serverless-localstack versions prior to 1.4.1 Description An OS command injection issue exists within the Configuration Handler component in the src/index.js file. This occurs when the custom.localstack.docker.compose file argument ...
CVE-2025-71176 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.13-sdk, py3-cassandra-medusa, open-webui, request-1276, localstack, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk...
GHSA-6W46-J5RX-G56G vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.13-sdk, py3-cassandra-medusa, open-webui, request-1276, localstack, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk...
GHSA-54JJ-PX8X-5W5Q vulnerabilities
Vulnerabilities for packages: dbt-snowflake, dbt-core, localstack, dbt-bigquery...