GHSA-3J78-PF43-6MVQ vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-5Q2P-7748-G6QP vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

CVE-2026-53212 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

CVE-2026-53218 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-5R3H-V82J-R7RR vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-FJ73-9FR6-G7MW vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-7Q5M-QV9W-C8XX vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-HFRJ-R4V7-3997 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

GHSA-JPVF-6235-4RH8 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware...

KLA91129 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure Synapse can be exploited remotely ...

EUVD-2026-40281

A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...

CVE-2026-13316

Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...

CVE-2026-13316

A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component. Mitigation Mitigation for this issue is either not availab...

CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

EUVD-2026-35504

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally...

CVE-2026-45476 Microsoft Azure Network Adapter Elevation of Privilege Vulnerability

...

CVE-2026-45476 Microsoft Azure Network Adapter Elevation of Privilege Vulnerability

...

CVE-2026-45642 Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability

...

CVE-2026-45642 Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability

...

CLEANSTART-2026-XQ22308 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...