Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the CEL-based HTTP functions. An attacker can make unauthorized network requests to internal or external resources and exfitrate sensitive information AWS IAM credentials, GCP tokens by crafting...

Kyverno security vulnerabilities

Kyverno is an open-source policy engine designed for Kubernetes. Versions of Kyverno prior to 1.16.3 and 1.15.3 have security vulnerabilities. These vulnerabilities stem from the policy engine’s unlimited memory consumption, which could allow users with permission to create policies to execute...

UBUNTU-CVE-2025-7519

A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This issue can lead to a crash or other unexpected behavior, and arbitrary code execution is not discarded. To exploit this flaw, a high-privilege account i...