61546 matches found
GO-2026-5998 open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters in github.com/open-feature/open-feature-operator
open-feature-operator: Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters in github.com/open-feature/open-feature-operator...
GO-2026-5991 nebula-mesh: Operator session tokens stored in plaintext in the database in github.com/forgekeep/nebula-mesh
nebula-mesh: Operator session tokens stored in plaintext in the database in github.com/forgekeep/nebula-mesh...
meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token Summary AuthInjectionMiddleware in meta-ads-mcp rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent. Because extracttokenfromheaders does not recognise the X-Pipeboard-Token header, an attacker who sends...
GHSA-2V2F-MVFG-PH56 meta-ads-mcp: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token
X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token Summary AuthInjectionMiddleware in meta-ads-mcp rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent. Because extracttokenfromheaders does not recognise the X-Pipeboard-Token header, an attacker who sends...
CVE-2026-44722 pyzipper: Encryption bypass for small files encrypted with pyzipper
pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...
CVE-2026-44722
pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...
CVE-2026-63100
Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users to access and modify global hosting settings by exploiting unprotected show and update actions in the Settings::HostingsController, where the beforeaction ensureadmin filte...
CVE-2026-49211 Symfony UX: Information exposure via unescaped LIKE wildcards in EntitySearchUtil
Symfony UX is a JavaScript ecosystem for Symfony. From 2.2.0 until 2.36.0 and 3.1.0, Symfony\UX\Autocomplete\Doctrine\EntitySearchUtil::addSearchClause builds the LIKE expression used by the autocomplete endpoint by wrapping the client-supplied query in %...% without escaping SQL LIKE wildcards %...
Exposure Of Sensitive Information
github.com/forgekeep/nebula-mesh is vulnerable to Exposure of Sensitive Information. The vulnerability is due to operator session tokens being stored in plaintext in the database rather than in a protected or hashed form, which allows an attacker with access to the database e.g., through backups,...
CVE-2026-53717 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
CVE-2026-53719 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
CVE-2026-53713 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
CVE-2026-53715 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
GHSA-CXPQ-8V7Q-CG56 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
CVE-2026-53716 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
GHSA-8FV2-88GG-HM7Q vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
GHSA-FCRP-7GC2-93G7 vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...
GHSA-WCRF-9VRR-854F vulnerabilities
Vulnerabilities for packages: datadog-agent, tigera-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator...