OpenBao authorization issue vulnerability

OpenBao versions 2.3.0 through 2.6.3 contain an authorization issue vulnerability. This vulnerability stems from improper authorization in the ACL policy cache; it allows tokens to reference policies from any namespace using specially crafted policy names. As a result, attackers possessing such...

CVE-2026-54765

Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik's Kubernetes Gateway API provider may resolve two accepted HTTPRoutes that target the same backend Service:port but configure different backendRef filters to the same child service and apply only...