194652 matches found
GHSA-3V45-F3VH-WG7M vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...
GHSA-MPWR-8VM7-H73F vulnerabilities
Vulnerabilities for packages: x509-certificate-exporter, gobuster, crossplane-provider-azure-signalrservice, crossplane-provider-azure-search, crossplane-provider-azure-notificationhubs, crossplane-provider-azure-orbital, splunk-otel-collector, crossplane-provider-azure-operationsmanagement, nfpm...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: kine, aactl, frankenphp-8.3, kubevela-fips, omnictl-multiarch-fips, external-secrets-operator, seaweedfs-rocksdb-fips, reports-server, flux-source-controller, commercial-expanso-edge, gitea, flux-source-controller-fips, argocd-image-updater-fips, argo-cd, osv-scanner...
GHSA-M2V9-299J-RV96 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: cert-manager, buildkitd, containerd, nuclei, datadog-agent, pulumi-language-java, witness, scorecard, wal-g, gomplate, prometheus-operator, cilium-cli, syft, mattermost, opentelemetry-collector, rancher-agent, chisel, rancher, kots, kyverno, terragrunt,...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: helm, cert-manager, gitlab-kas, chisel, rancher, kots, containerd, kyverno, osv-scanner, falco-no-driver, flux-source-controller, prometheus, flux-image-automation-controller, minio, fscrypt, k3s, telegraf, trivy, kine, kaf, zarf, aactl, flux, gitea,...
GHSA-89GR-R52H-F8RX vulnerabilities
Vulnerabilities for packages: cluster-api-azure-controller, cert-manager, buildkitd, step-issuer, k8sgpt, containerd, nuclei, datadog-agent, pulumi-language-java, witness, teleport, steampipe, scorecard, wal-g, atlantis, gomplate, mods, prometheus-operator, crossplane-provider-family-azure,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: helm, cert-manager, gitlab-kas, chisel, rancher, kots, containerd, kyverno, osv-scanner, falco-no-driver, flux-source-controller, prometheus, flux-image-automation-controller, minio, fscrypt, k3s, telegraf, trivy, kine, kaf, zarf, aactl, flux, gitea,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: cert-manager, step-issuer, containerd, nuclei, pulumi-language-java, witness, scorecard, gomplate, prometheus-operator, cilium-cli, syft, mattermost, opentelemetry-collector, rancher-agent, rancher, kots, kyverno, terragrunt, pulumi-kubernetes-operator, podman,...
GHSA-QPW4-5X99-6VJP vulnerabilities
Vulnerabilities for packages: cert-manager, buildkitd, containerd, nuclei, datadog-agent, pulumi-language-java, witness, scorecard, wal-g, gomplate, prometheus-operator, cilium-cli, syft, mattermost, opentelemetry-collector, rancher-agent, chisel, rancher, kots, kyverno, terragrunt,...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: cluster-api-azure-controller, cert-manager, buildkitd, step-issuer, k8sgpt, containerd, nuclei, datadog-agent, pulumi-language-java, witness, teleport, steampipe, crossplane-provider-aws-ec2, scorecard, wal-g, atlantis, crossplane-provider-aws-cloudfront, gitlab-page...
CVE-2026-44735
Technical details for CVE-2026-44735 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-44735
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share details for ALL work packages in a project to any user with the viewsharedworkpackages permission. The authorization check operates at the project level onl...
EUVD-2026-39880
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share details for ALL work packages in a project to any user with the viewsharedworkpackages permission. The authorization check operates at the project level onl...
CVE-2026-44735 OpenProject: Shares API Information Disclosure
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share details for ALL work packages in a project to any user with the viewsharedworkpackages permission. The authorization check operates at the project level onl...
CVE-2026-44735 OpenProject: Shares API Information Disclosure
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share details for ALL work packages in a project to any user with the viewsharedworkpackages permission. The authorization check operates at the project level onl...
CVE-2026-44735 OpenProject: Shares API Information Disclosure
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share details for ALL work packages in a project to any user with the viewsharedworkpackages permission. The authorization check operates at the project level onl...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libtiff: libtiff-4.7.1-2.2.hum1 aarch64, x8664 libtiff-devel-4.7.1-2.2.hum1 aarch64, x8664 libtiff-static-4.7.1-2.2.hum1 aarch64, x8664 libtiff-tools-4.7.1-2.2.hum1 aarch64, x8664...
CVE-2026-44736 OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects
OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GET /api/v3/relations endpoint allows any authenticated user to retrieve relations — and the subject title of work packages they have no permission to view — by supplying an arbitrary work package ID in the...
CVE-2026-44736 OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects
OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GET /api/v3/relations endpoint allows any authenticated user to retrieve relations — and the subject title of work packages they have no permission to view — by supplying an arbitrary work package ID in the...