36090 matches found
airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-68969 via apache-airflow (2.4.3)
apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-68969 Source advisory: OSV:GHSA-CJV4-7HP2-2X9H...
airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-68970 via apache-airflow (2.4.3)
apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-68970 Source advisory: OSV:GHSA-F3C2-J7G8-VPP8...
airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-68076 via apache-airflow (2.4.3)
apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-68076 Source advisory: OSV:GHSA-75MG-C62R-V95G...
airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-59244 via apache-airflow (2.4.3)
apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-59244 Source advisory: OSV:GHSA-F643-3RC2-J27W...
[SECURITY] [DLA 4735-1] neutron security update
Debian LTS Advisory DLA-4735-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón August 12, 2026 https://wiki.debian.org/LTS Package : neutron Version : 2:21.0.0-7+deb12u1 CVE ID : CVE-2026-55707 Debian Bug : 1142937 1143170 Multiple vulnerabilities were...
CVE-2026-73294
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-73293
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/id/roles to create a custom manager role with permission bitmask 15, overridin...
airflow-clickhouse-plugin (>=0.9.0, <=0.9.1), bigeye-airflow (>=0.1.20, <=0.1.21) +3 more potentially affected by CVE-2026-59244 via apache-airflow (2.4.3)
apache-airflow PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin =0.9.0, =0.1.20, =2.4.3, =2.4.3.4 Source cves: CVE-2026-59244 Source advisory: OSV:PYSEC-2026-3706...
CVE-2026-73294
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-73294 Semaphore U: OS Command Injection
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-70430
A flaw was found in Jenkins. This vulnerability allows an attacker with Overall/Manage permission to instantiate arbitrary types of objects within the project naming strategy configuration. This includes types typically reserved for administrators, potentially leading to unauthorized configuratio...
CVE-2026-73293
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/id/roles to create a custom manager role with permission bitmask 15, overridin...
CVE-2026-73293
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/id/roles to create a custom manager role with permission bitmask 15, overridin...
CVE-2026-73293 Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/id/roles to create a custom manager role with permission bitmask 15, overridin...
CVE-2026-73293
CVE-2026-73293 affects Semaphore UI. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, the combination of ProjectMiddleware and GetProjectOrGlobalRoleBySlug allows a project manager to create a custom manager role via POST /api/project/{id}/roles with permission bitmask 15, which overri...
CVE-2026-68752
A Project Resource Manager may gain broader administrative privileges under specific conditions...
CVE-2026-68752
Technical details (affected products, versions, root cause, and remediation) are not publicly available in the provided documents; monitor for updates.
CVE-2026-68752 Project Resource Managers may escalate privileges in JFrog Artifactory
A Project Resource Manager may gain broader administrative privileges under specific conditions...
