76 matches found
CVE-2022-27251
CVE-2022-27251 Ejecución remota de código en LocalStack 0.12.6 Debido a la falta de sanitización de la entrada del usuario en el campo del controlador de la API de Lambda al generar funciones Lambda, y a la forma insegura en que se generan los contenedores Docker, se puede proporcionar una...
cicd-goat
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...
GO-2026-6093 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-HQVF-45JJ-MCCQ vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-18654 vulnerabilities
Vulnerabilities for packages: localstack...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: amazon-k8s-cni-fips, victorialogs, go, pgwatch, victorialogs-fips, flux-image-reflector-controller, flux-notification-controller, grafana-operator, temporal-fips, nova-fips, aws-ebs-csi-driver, nova, victoriametrics-fips, loki-fips, grafana-fips, flux-source-watcher,...
GHSA-464C-974J-9XM6 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-13769 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-WFP6-F47H-HXC3 vulnerabilities
Vulnerabilities for packages: localstack...
EUVD-2026-48434
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
CVE-2026-16763 affects localstack serverless-localstack up to version 1.4.0. The vulnerability targets an unknown function in src/index.js of the Configuration Handler, where manipulating the argument custom.localstack.docker.compose_file enables local OS command injection. The CVE describes loca...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
PT-2026-64183
Name of the Vulnerable Software and Affected Versions localstack serverless-localstack versions prior to 1.4.1 Description An OS command injection issue exists within the Configuration Handler component in the src/index.js file. This occurs when the custom.localstack.docker.compose file argument ...
CVE-2025-71176 vulnerabilities
Vulnerabilities for packages: open-webui, request-1276, apache-beam-python-3.12-sdk, py3-cassandra-medusa, localstack, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk...
GHSA-6W46-J5RX-G56G vulnerabilities
Vulnerabilities for packages: open-webui, request-1276, apache-beam-python-3.12-sdk, py3-cassandra-medusa, localstack, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk...
GHSA-54JJ-PX8X-5W5Q vulnerabilities
Vulnerabilities for packages: dbt-core, dbt-snowflake, dbt-bigquery, localstack...