1093 matches found
CVE-2026-9563
A flaw was found in Eclipse Parsson. The JSON parser did not enforce a default maximum on the number of characters consumed while processing a single JSON document. A remote attacker could exploit this by providing a very large, specially crafted JSON document. This could force applications to...
CVE-2026-48978 vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, cluster-api-helm-controller-fips, headlamp, ocm-cli, crossplane-fips, rancher, rancher-fleet, helm-exporter, conftest, drone, tw, chartmuseum, cloudbeat-fips, k9s, jfrog-cli, ocm-cli-fips, conftest-fips, kgateway-fips, kargo,...
GHSA-XF85-363P-868W vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, cluster-api-helm-controller-fips, headlamp, ocm-cli, crossplane-fips, rancher, rancher-fleet, helm-exporter, conftest, drone, tw, chartmuseum, cloudbeat-fips, k9s, jfrog-cli, ocm-cli-fips, conftest-fips, kgateway-fips, kargo,...
GHSA-VH4V-2XQ2-G5CG vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, cluster-api-helm-controller-fips, headlamp, ocm-cli, crossplane-fips, rancher, rancher-fleet, helm-exporter, conftest, drone, tw, chartmuseum, cloudbeat-fips, k9s, jfrog-cli, ocm-cli-fips, conftest-fips, kgateway-fips, kargo,...
CVE-2026-50162 vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, cluster-api-helm-controller-fips, headlamp, ocm-cli, crossplane-fips, rancher, rancher-fleet, helm-exporter, conftest, drone, tw, chartmuseum, cloudbeat-fips, k9s, jfrog-cli, ocm-cli-fips, conftest-fips, kgateway-fips, kargo,...
GHSA-8XWF-RJM4-XVHV vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, cluster-api-helm-controller-fips, headlamp, ocm-cli, crossplane-fips, rancher, rancher-fleet, helm-exporter, conftest, drone, tw, chartmuseum, cloudbeat-fips, k9s, jfrog-cli, ocm-cli-fips, conftest-fips, kgateway-fips, kargo,...
CVE-2026-50151 vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, cluster-api-helm-controller-fips, headlamp, ocm-cli, crossplane-fips, rancher, rancher-fleet, helm-exporter, conftest, drone, tw, chartmuseum, cloudbeat-fips, k9s, jfrog-cli, ocm-cli-fips, conftest-fips, kgateway-fips, kargo,...
GHSA-JXPM-75MH-9FP7 vulnerabilities
Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, cluster-api-helm-controller-fips, headlamp, ocm-cli, crossplane-fips, rancher, rancher-fleet, helm-exporter, conftest, drone, tw, chartmuseum, cloudbeat-fips, k9s, jfrog-cli, ocm-cli-fips, conftest-fips, kgateway-fips, kargo,...
CVE-2026-50162 vulnerabilities
Vulnerabilities for packages: consul-k8s, k9s, kyverno-notation-aws, gatekeeper, helm-operator, eksctl, rancher, cert-manager-cmctl, steampipe, chartmuseum, oras, conftest, kyverno, rancher-agent, helm-push, teleport, xeol, kube-arangodb, maru, trivy, helm-mapkubeapis, kubescape-operator,...
CVE-2026-50151 vulnerabilities
Vulnerabilities for packages: consul-k8s, k9s, kyverno-notation-aws, gatekeeper, helm-operator, eksctl, rancher, cert-manager-cmctl, steampipe, chartmuseum, oras, conftest, kyverno, rancher-agent, helm-push, teleport, xeol, kube-arangodb, maru, trivy, helm-mapkubeapis, kubescape-operator,...
GHSA-VH4V-2XQ2-G5CG vulnerabilities
Vulnerabilities for packages: consul-k8s, k9s, kyverno-notation-aws, gatekeeper, helm-operator, eksctl, rancher, cert-manager-cmctl, steampipe, chartmuseum, oras, conftest, kyverno, rancher-agent, helm-push, teleport, xeol, kube-arangodb, maru, trivy, helm-mapkubeapis, kubescape-operator,...
GHSA-8XWF-RJM4-XVHV vulnerabilities
Vulnerabilities for packages: consul-k8s, k9s, kyverno-notation-aws, gatekeeper, helm-operator, eksctl, rancher, cert-manager-cmctl, steampipe, chartmuseum, oras, conftest, kyverno, rancher-agent, helm-push, teleport, xeol, kube-arangodb, maru, trivy, helm-mapkubeapis, kubescape-operator,...
GHSA-JXPM-75MH-9FP7 vulnerabilities
Vulnerabilities for packages: consul-k8s, k9s, kyverno-notation-aws, gatekeeper, helm-operator, eksctl, rancher, cert-manager-cmctl, steampipe, chartmuseum, oras, conftest, kyverno, rancher-agent, helm-push, teleport, xeol, kube-arangodb, maru, trivy, helm-mapkubeapis, kubescape-operator,...
CVE-2026-48978 vulnerabilities
Vulnerabilities for packages: consul-k8s, k8sgpt, k9s, kyverno-notation-aws, gatekeeper, helm-operator, eksctl, rancher, cert-manager-cmctl, steampipe, chartmuseum, oras, conftest, kyverno, rancher-agent, helm-push, teleport, xeol, kube-arangodb, maru, trivy, helm-mapkubeapis, kubescape-operator,...
GHSA-XF85-363P-868W vulnerabilities
Vulnerabilities for packages: consul-k8s, k8sgpt, k9s, kyverno-notation-aws, gatekeeper, helm-operator, eksctl, rancher, cert-manager-cmctl, steampipe, chartmuseum, oras, conftest, kyverno, rancher-agent, helm-push, teleport, xeol, kube-arangodb, maru, trivy, helm-mapkubeapis, kubescape-operator,...
PT-2026-54936
Name of the Vulnerable Software and Affected Versions Eclipse Parsson versions prior to 1.1.8 Description The JSON parser does not enforce a default maximum on the number of characters consumed when parsing a single JSON document. This allows an attacker to provide specially crafted JSON document...
qs: qs: Denial of Service via improper input validation in array parsing
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation e.g., a=value. This bypasses the arrayLimit option, which is designed to limit the size of...
CVE-2026-53426 Atom-table exhaustion denial-of-service via JSON parse_document in MDEx
Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessive Allocation. MDEx.parsedocument/2 accepts a :json, json source. In lib/mdex.ex, the private jsontonode/1 function passes the attacker-controlled nodetype value to Module.concat/1, which calls...
PYSEC-2026-319 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
Summary The safeevalexpression function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes giframe, fback, fbuiltins do NOT start with underscore, enabling a complete sandbox escape to achieve...
