dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2026-46457

CVE-2026-46457 — camel-nats Inbound Header Injection SSRF Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nats-server2.12: nats-server2.12-2.12.15-0.3.hum1 aarch64, s390x, x8664 nats-server2.12-2.12.15-0.3.hum1.src src Security Fixes: nats-server2.12: CVE-2026-111943...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nats-server2.14: nats-server2.14-2.14.8-0.2.hum1 aarch64, s390x, x8664 nats-server2.14-2.14.8-0.2.hum1.src src Security Fixes: nats-server2.14: CVE-2026-111943...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, teleport-operator-fips, mapotf-fips, http-echo, kubedock, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, crossplane-provider-aws-gamelift, kubernetes-event-exporter-fips, azuredisk-csi-fips, crossplane-provider-aws-ds-fips,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, teleport-operator-fips, mapotf-fips, kubedock, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, crossplane-provider-aws-gamelift, kubernetes-event-exporter-fips, azuredisk-csi-fips, crossplane-provider-aws-ds-fips,...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, teleport-operator-fips, mapotf-fips, kubedock, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, crossplane-provider-aws-gamelift, kubernetes-event-exporter-fips, azuredisk-csi-fips, crossplane-provider-aws-ds-fips,...

camel-nats: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...

EUVD-2026-86328

OpenObserve is a cloud-native observability platform. Prior to 0.90.3, OpenObserve registers the /config/runtime endpoint without authentication and serializes the complete server configuration after applying the hidesensitivefields keyword filter. The filter does not recognize dsn or creds field...

CLEANSTART-2025-FI25096 Security fix for GHSA-fhg8-qxh5-7q3w applied in: prometheus-nats-exporter 0.15.0-r0, prometheus-nats-exporter 0.16.0-r0

GHSA-fhg8-qxh5-7q3w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JI58569 Security fix for CVE-2023-46129 applied in: nats-server-fips 2.10.4-r0

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QF31649 Security fix for CVE-2026-33249 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QU10811 Security fix for CVE-2026-33247 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YK24413 Security fix for CVE-2026-33248 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OV69039 Security fix for CVE-2026-33223 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YB47349 Security fix for CVE-2026-33222 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YJ62834 Security fix for CVE-2026-33219 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IK89533 Security fix for CVE-2026-33218 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WK59830 Security fix for CVE-2026-33215 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DS19189 Security fix for CVE-2026-33246 applied in: nats-server-fips 2.12.5-r1

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...