nova-tracer

Nova-tracer Agent Monitoring and Visibility Security monitoring and prompt injection defense for Claude Code using the NOVA Framework. Features Session Tracking - Captures all tool usage with timestamps and metadata Prompt Injection Detection - Three-tier scanning keywords, semantic ML, LLM -...

nova-framework

NOVA: The Prompt Pattern Matching Generative AI systems are rapidly being adopted and deployed across organizations. While they enhance productivity and efficiency, they also expand the attack surface. How do you detect abusive usage of your system? How do you hunt for malicious prompts? Whether ...

OPENSUSE-SU-2026:12464-1 nova-3.12.3-1.1 on GA media

These are all security issues fixed in the nova-3.12.3-1.1 package on the GA media of openSUSE Tumbleweed...

openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova

A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...

openstack-nova: OpenStack Nova: Resource allocation issue due to unstripped hint data in server creation API

A flaw was found in OpenStack Nova. The server creation application programming interface API fails to remove specific hint data, leading to instances being created without proper Placement allocation. This can result in a denial of service, as resources may not be correctly assigned or managed f...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 security advisory

Updated packages that resolve security issues are now available for Red Hat OpenStack Platform 13.0 for Red Hat Enterprise Linux RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 7 : Red Hat OpenStack Platform 13.0 security advisory (Important) (RHSA-2026:94039)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:94039 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

CVE-2026-40573

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

EUVD-2026-114458

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

CVE-2026-40573 NovumOS: Nova Interpreter Privilege Escalation

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

CVE-2026-40573

The NovumOS 32-bit operating system is vulnerable to local privilege escalation in versions prior to 0.25-beta.1 . The root cause is that the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access, failing to isolate script execution within a restricted Ring 3 domain. An attacker ...

CVE-2026-40573 NovumOS: Nova Interpreter Privilege Escalation

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

PT-2026-134199

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

CVE-2026-40573: MinecAnton209 NovumOS: NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly

NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. Prior to version 0.25-beta.1, the Nova interpreter runs in Ring 0 with unrestricted kernel-memory access. Loading a malicious .nv script through the shell permits a local user to execute code with kernel privileges witho...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +68 more potentially affected by CVE-2026-116691 via mlflow-tracing (>=3.2.0rc0, <=3.16.1)

mlflow-tracing PYPI version =3.2.0rc0, =1.0.0, =0.4.0, =0.0.7, =1.0.17.1, =0.0.0, =1.23.0, =0.3.0, =0.1.0, =0.2.1, =0.0.1, =0.1.4 and more Source cves: CVE-2026-116691 Source advisory: MEND:CVE-2026-116691...

CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE — Detect

Fingerprint / reachability check for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CFEngine Enterprise Nova Hub — VCS Settings Command Injection → Root RCE""" from kittysploit import from...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (>=1.3.14, <=1.3.18) potentially affected by CVE-2026-112408 via sagemaker (3.5.0)

sagemaker PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge =1.3.14, =1.3.18 Source cves: CVE-2026-112408 Source advisory:...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (1.3.14) potentially affected by CVE-2026-112408 via sagemaker-core (2.5.0)

sagemaker-core PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker-core and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge 1.3.14 Source cves: CVE-2026-112408 Source advisory: MEND:CVE-2026-112408...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (>=1.3.14, <=1.3.18) potentially affected by CVE-2026-110248 via sagemaker (3.5.0)

sagemaker PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge =1.3.14, =1.3.18 Source cves: CVE-2026-110248 Source advisory:...

amzn-nova-customization-sdk (1.3.14), amzn-nova-forge (>=1.3.14, <=1.3.18) potentially affected by CVE-2026-110248 via sagemaker (3.5.0)

sagemaker PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge =1.3.14, =1.3.18 Source cves: CVE-2026-110248 Source advisory: MEND:CVE-2026-110248...