CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

CLEANSTART-2026-WX98104 Security fix for CVE-2026-42338 applied in: opensearch-dashboards-fips 2.19.5-r0, proxy-agent 6.5.0-r0, pulumi 3.248.0-r0, renovate 43.123.8-r3, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1, sqlpad 7.5.7-r3

CVE-2026-42338 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IM94459 Security fix for CVE-2026-9358 applied in: npm 11.14.0-r3, pulumi 3.248.0-r0

CVE-2026-9358 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GE92046 Security fix for CVE-2026-45149 applied in: npm 11.14.0-r0, pulumi 3.248.0-r0, renovate 44.31.0-r1, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-45149 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QG09964 Security fix for CVE-2026-5160 applied in: crossplane-provider-keycloak 2.22.1-r2, pulumi 3.248.0-r0

CVE-2026-5160 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PW61027 Security fix for CVE-2026-59877 applied in: langfuse 3.208.0-r1, n8n 2.28.0-r2, pulumi 3.248.0-r0

CVE-2026-59877 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SG26208 Security fix for CVE-2026-59892 applied in: n8n 2.28.0-r2, pulumi 3.248.0-r0

CVE-2026-59892 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FX79373 Security fix for CVE-2026-48816 applied in: pulumi 3.248.0-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-48816 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BS35481 Security fix for CVE-2026-48758 applied in: pulumi 3.248.0-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-48758 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AZ47953 Security fix for CVE-2026-48815 applied in: pulumi 3.248.0-r0, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-48815 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VP69884 Security fix for CVE-2026-54285 applied in: pulumi 3.248.0-r0

Security vulnerability affects the pulumi package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-2883-XCG3-V3HH vulnerabilities

Vulnerabilities for packages: renovate, opensearch-dashboards, authentik, wazuh-dashboard, unleash-proxy, vitess, lerna, redisinsight, authentik-fips, argo-workflows, arangodb, gitlab-rails-ce-fips, kubeflow-katib, prism, percona-server-mongodb, mongod, pulumi, kibana, eslint,...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: renovate, opensearch-dashboards, authentik, wazuh-dashboard, unleash-proxy, vitess, lerna, redisinsight, authentik-fips, argo-workflows, arangodb, gitlab-rails-ce-fips, kubeflow-katib, prism, percona-server-mongodb, mongod, pulumi, kibana, eslint,...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: prism, renovate, pulumi, lerna, code-server, ts-patch, vitess, eslint, sqlpad, opensearch-dashboards, argo-workflows, kubeflow-katib...

GHSA-2883-XCG3-V3HH vulnerabilities

Vulnerabilities for packages: prism, renovate, pulumi, lerna, code-server, ts-patch, vitess, eslint, sqlpad, opensearch-dashboards, argo-workflows, kubeflow-katib...

GO-2026-6354 vulnerabilities

Vulnerabilities for packages: peerdb-flow, grype-fips, opentelemetry-collector-contrib-fips, nfpm, frankenphp-8.2, guac, flux-notification-controller, drone-fips, grype, nemo, syft-fips, argo-cd-fips, prometheus, gitness, frankenphp-8.5, longhorn-manager-fips, cloudbeat, rclone-fips, mediamtx,...

CVE-2026-78662 vulnerabilities

Vulnerabilities for packages: peerdb-flow, grype-fips, opentelemetry-collector-contrib-fips, nfpm, frankenphp-8.2, guac, flux-notification-controller, drone-fips, grype, nemo, syft-fips, argo-cd-fips, prometheus, gitness, frankenphp-8.5, longhorn-manager-fips, cloudbeat, rclone-fips, mediamtx,...

GO-2026-6355 vulnerabilities

Vulnerabilities for packages: peerdb-flow, grype-fips, opentelemetry-collector-contrib-fips, nfpm, frankenphp-8.2, guac, flux-notification-controller, drone-fips, grype, nemo, syft-fips, argo-cd-fips, prometheus, gitness, frankenphp-8.5, rclone-fips, cloudbeat, mediamtx, gomplate, jfrog-cli,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: peerdb-flow, grype-fips, opentelemetry-collector-contrib-fips, nfpm, frankenphp-8.2, guac, flux-notification-controller, drone-fips, grype, nemo, syft-fips, argo-cd-fips, prometheus, gitness, frankenphp-8.5, rclone-fips, cloudbeat, mediamtx, gomplate, jfrog-cli,...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: gitlab-runner, juicefs, skaffold, witness, argo-workflows, prometheus-operator, cerbos, spire-server, pulumi-kubernetes-operator, zarf, nfpm, rancher-fleet, docker, dagger, kine, pulumi-language-java, guac, grype, rancher-machine, xeol, wal-g, gomplate,...