CVE-2026-29049

melange allows users to build apk packages using declarative pipelines. In version 0.40.5 and prior, melange update-cache downloads URIs from build configs via io.Copy without any size limit or HTTP client timeout pkg/renovate/cache/cache.go. An attacker-controlled URI in a melange config can cau...

Targeted Bit-Flip Attacks on LLM-Based Agents

Targeted bit-flip attacks BFAs exploit hardware faults to manipulate model parameters, posing a significant security threat. While prior work targets single-step inference models e.g., image classifiers, LLM-based agents with multi-stage pipelines and external tools present new attack surfaces,...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3

The 1.20.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20. release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3

The 1.20.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20.3 release of Red Hat OpenShift Pipelines Operator...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant. Versions of OpenClaw prior to 2026.2.1 contained security vulnerabilities. These vulnerabilities stemmed from Twitch plugins that did not enforce the allowFrom permission list properly, allowing remote attackers to bypass access control...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4

The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4

The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4

The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3

The 1.15.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.3 release of Red Hat OpenShift Pipelines Operator...

AWE: Adaptive Agents for Dynamic Web Penetration Testing

Modern web applications are increasingly produced through AI-assisted development and rapid no-code deployment pipelines, widening the gap between accelerating software velocity and the limited adaptability of existing security tooling. Pattern-driven scanners fail to reason about novel contexts,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: beats-fips, livekit-server, eck-operator-fips, headlamp, rancher-webhook, descheduler-fips, restic, external-secrets-operator, cluster-api-helm-controller-fips, boring-registry, cloud-provider-azure-fips, bank-vaults-fips, cass-operator-fips, kaniko-fips, minio-fips,...

PT-2026-21862

The SPIP interface traduction objets plugin versions prior to 4.3.3 contain an authenticated SQL injection vulnerability in interface traduction objets pipelines.php. When handling translation requests, the plugin reads the id parent parameter from user-supplied input and concatenates it directly...

CVE-2026-26960 vulnerabilities

Vulnerabilities for packages: pnpm-stage0, py3-jupyterlab, saf, node-gyp, opensearch-dashboards, renovate, sqlpad, code-server, prism, kubeflow-katib, tileserver-gl, vitess, npm, kubeflow-pipelines, pulumi, lerna...

CVE-2025-69873 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, eslint, saf, opensearch-dashboards, serve, argo-workflows, renovate, langfuse, kubeflow-centraldashboard, prism, kubeflow-katib, tileserver-gl, vitess, sqlpad, kubeflow-pipelines...

GHSA-2G4F-4PWH-QVX6 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, eslint, saf, opensearch-dashboards, serve, argo-workflows, renovate, langfuse, kubeflow-centraldashboard, prism, kubeflow-katib, tileserver-gl, vitess, sqlpad, kubeflow-pipelines...

GHSA-JMR7-XGP7-CMFJ vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, saf, renovate, prism, tileserver-gl, kubeflow-pipelines...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: pnpm-stage0, py3-jupyterlab, saf, node-gyp, opensearch-dashboards, renovate, sqlpad, code-server, prism, kubeflow-katib, tileserver-gl, vitess, npm, kubeflow-pipelines, pulumi, lerna...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, saf, renovate, prism, tileserver-gl, kubeflow-pipelines...

CVE-2026-1440

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: kibana, saf, jitsucom-jitsu, tileserver-gl, tileserver-gl-fips, prism, langfuse-fips, librechat, langfuse, dbgate, renovate, dbgate-fips, kubeflow-pipelines...