CVE-2026-15643: Server-Side Request Forgery (SSRF)

AWS HealthLake MCP Server awslabs.healthlake-mcp-server is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all...

SQL Injection

Overview rococo is an A Python library to help build things the way we want them built Affected versions of this package are vulnerable to SQL Injection due to improper handling of user-supplied pagination parameters. An attacker can exploit this by supplying crafted pagination values containing...

SUSE-SU-2023:2298-1 Security update for distribution

This update for distribution fixes the following issues: Update to verison 2.8.2: - Revert registry/client: set Accept: identity header when getting layers - Parse http forbidden as denied - Fix CVE-2023-2253 runaway allocation on /v2/catalog bsc1207705 - Fix panic in inmemory driver - update to...