1158 matches found
CVE-2025-62718 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, saf, opensearch-dashboards, langfuse, kubeflow-centraldashboard, nextcloud-server, prism, kubeflow-katib, kubeflow-pipelines, lerna...
GHSA-3P68-RC4W-QGX5 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, saf, opensearch-dashboards, langfuse, kubeflow-centraldashboard, nextcloud-server, prism, kubeflow-katib, kubeflow-pipelines, lerna...
GHSA-3P68-RC4W-QGX5 vulnerabilities
Vulnerabilities for packages: kibana, gitlab-rails-ce-fips, gitlab-rails-ce, prism, opensearch-dashboards, langfuse, awx, langfuse-fips, kubeflow-pipelines, redisinsight, jitsucom-jitsu, librechat, kubeflow-katib, wazuh-dashboard, saf, nextcloud-server, opensearch-dashboards-fips, lerna,...
CVE-2025-62718 vulnerabilities
Vulnerabilities for packages: kibana, gitlab-rails-ce-fips, gitlab-rails-ce, prism, opensearch-dashboards, langfuse, awx, langfuse-fips, kubeflow-pipelines, redisinsight, jitsucom-jitsu, librechat, kubeflow-katib, wazuh-dashboard, saf, nextcloud-server, opensearch-dashboards-fips, lerna,...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, kserve, mitmproxy, datadog-agent, kubeflow-pipelines-visualization-server, k8s-sidecar, kubeflow-jupyter-web-app, ggshield, semgrep, kubeflow-volumes-web-app, py3-cassandra-medusa, mycli, open-webui, airflow, superset, in-toto, dask-kubernetes...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, kserve, mitmproxy, datadog-agent, kubeflow-pipelines-visualization-server, k8s-sidecar, kubeflow-jupyter-web-app, ggshield, semgrep, kubeflow-volumes-web-app, py3-cassandra-medusa, mycli, open-webui, airflow, superset, in-toto, dask-kubernetes...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: semgrep, request-1276, py3-cassandra-medusa, openstack-kolla-toolbox-2025.2, dask-kubernetes, dagster, kubeflow-jupyter-web-app, metaflow-service, kserve, airflow-core, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, mitmproxy, nemo, open-webui, barman,...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: semgrep, request-1276, py3-cassandra-medusa, openstack-kolla-toolbox-2025.2, dask-kubernetes, dagster, kubeflow-jupyter-web-app, metaflow-service, kserve, airflow-core, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, mitmproxy, nemo, open-webui, barman,...
PT-2026-31719
Name of the Vulnerable Software and Affected Versions versions not specified Description A remote attacker with low privileges can manipulate Modbus register values used in odorant injection logic, potentially causing over or under-injection of odorant into a gas line. Attackers have exploited th...
Signals from the Cloud Security Forecast 2026: Cloud Risk Is Scaling through Design, Not Disruption
Key Takeaways Identity and permissions now determine what is reachable, making them the primary drivers of cloud risk. Runtime exposure, not individual findings, determines how low-risk issues combine into real impact. SaaS and OAuth integrations extend the control plane and amplify blast radius...
GHSA-FVX6-PJ3R-5Q4Q OpenClaw's complex interpreter pipelines could skip exec script preflight validation
Summary Before OpenClaw 2026.4.2, exec script preflight validation could fail open on complex interpreter invocations such as pipes or other non-simple command forms. In those cases, script-content validation could be skipped entirely. Impact An attacker-controlled command shape could bypass the...
GHSA-78H2-9FRX-2JM8 vulnerabilities
Vulnerabilities for packages: beats-fips, livekit-server, step-issuer, headlamp, xeol, dapr-fips, restic, flux-operator, external-secrets-operator, boring-registry, chainloop-artifact-cas-fips, ko, harbor-registry, bank-vaults-fips, omni-fips, opentelemetry-collector-contrib-fips, tempo, apko,...
CVE-2026-34986 vulnerabilities
Vulnerabilities for packages: beats-fips, livekit-server, step-issuer, headlamp, xeol, dapr-fips, restic, flux-operator, external-secrets-operator, boring-registry, chainloop-artifact-cas-fips, ko, harbor-registry, bank-vaults-fips, omni-fips, opentelemetry-collector-contrib-fips, tempo, apko,...
OpenClaw 安全漏洞
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Previous versions of OpenClaw, such as 8aceaf5, had security vulnerabilities. These vulnerabilities stemmed from a bypass of pre-checking in the shell-bleed protection mechanism. Attackers could execute blocked...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1
The 1.21.1 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.1 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1
The 1.21.1 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.1 release of Red Hat OpenShift Pipelines Operator...
SUSE CVE-2026-33211
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the pathInRepo parameter. A tenant with permissi...
GHSA-CV4X-93XX-WGFJ vulnerabilities
Vulnerabilities for packages: tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips, tkn...
