📄 dmonitor 1.0.3 Server-Side Request Forgery

dmonitor version 1.0.3 suffers from an unauthenticated server-side request forgery vulnerability that can allow for data exfiltration. Exploit Title: dmonitor v1.0.3 - Unauthenticated SSRF Date: 2026-04-18 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/dhjz/dmonitor Software...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: cloudnative-pg, falcoctl, jitsucom-bulker, trivy-operator, trivy, verticadb-operator, istio, consul-k8s, cert-manager-istio-csr, kubevela, k3s, headlamp, cilium, hubble, k8sgpt, kubernetes-dashboard-api, cri-tools, cluster-api, emissary, datadog-agent, argo-rollouts,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: cloudnative-pg, falcoctl, jitsucom-bulker, trivy-operator, trivy, verticadb-operator, istio, consul-k8s, cert-manager-istio-csr, kubevela, k3s, headlamp, cilium, hubble, k8sgpt, kubernetes-dashboard-api, cri-tools, cluster-api, emissary, datadog-agent, argo-rollouts,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: valkey: valkey-9.0.3-1.2.hum1 aarch64, x8664 valkey-compat-redis-9.0.3-1.2.hum1 noarch valkey-compat-redis-devel-9.0.3-1.2.hum1 noarch valkey-devel-9.0.3-1.2.hum1 aarch64, x8664...

Ubuntu: Security Advisory (USN-8169-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2026-35172

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.0, distribution can restore read access in repo a after an explicit delete when storage.cache.blobdescriptor: redis and storage.delete.enabled: true are both enabled. The delete path clears the shared dige...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Redis, Lua vulnerabilities (USN-8169-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8169-1 advisory. It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker...

USN-8169-1 redis, lua5.1, lua-cjson, lua-bitop vulnerabilities

It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was only addressed in lua5.1 on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2025-49844 It was...

USN-8169-1: Redis, Lua vulnerabilities

It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was only addressed in lua5.1 on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2025-49844 It was...

CLSA-2026-1776078299 redis: Fix of CVE-2023-41056

CVE-2023-41056: fix possible corruption in sdsResize due to incorrect allocalreadyoptimal logic skipping sds type header update...

redis: use-after-free in unblock client flow may allow remote code execution

A flaw was found in Redis. The unblock client flow does not handle an error return from the processCommandAndResetClient when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can cause a use-after-free issue. This potentially leads to...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: cert-manager, verticadb-operator, multus-cni, kubernetes-dashboard-api, grpc-health-probe, buf, datadog-agent, emissary, nats-top, gke-gcloud-auth-plugin, harbor-cli, opentelemetry-collector, hubble-ui, cosign, dapr, fuse-overlayfs-snapshotter, amazon-k8s-cni,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: gpu-operator-fips, dataplaneapi, maru, authservice-fips, mockgen, lazygit, dex, pgpool2exporter-fips, knative-net-istio, tkn-fips, supercronic-fips, pgtimetable, kubevirt-cdi-uploadserver-fips, mcp-grafana-fips, crossplane-provider-aws-cognitoidentity,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: consul-fips, gpu-operator-fips, aws-load-balancer-controller-fips, ytt-fips, kserve-modelmesh-serving, dataplaneapi, git-lfs, docker-credential-ecr-login-fips, knative-client, maru, terraform, dex-fips, authservice-fips, helm-mapkubeapis, kube-oidc-proxy, lazygit,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: consul-fips, gpu-operator-fips, aws-load-balancer-controller-fips, ytt-fips, kserve-modelmesh-serving, dataplaneapi, git-lfs, docker-credential-ecr-login-fips, apache-beam-python-3.13-sdk, knative-client, maru, terraform, dex-fips, authservice-fips, helm-mapkubeapis,...

CLSA-2026-1775836571 redis: Fix of CVE-2023-41056

CVE-2023-41056: fix possible corruption in sdsResize...

Security Bulletin: Vulnerabilities in Jetty, Eclipse Jetty,Spring Cloud Netflix Zuul,Spring Framework,Spring Security,NPM package,glob-parent package,jQuery,Braces, go-redis,qs,LZ4,js-yaml might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Jetty, Eclipse Jetty, Spring Cloud Netflix Zuul , Spring Framework, Spring Security, NPM package, glob-parent package, jQuery, Braces, go-redis, qs, LZ4 and js-yaml. Vulnerabilities include , bypassing the...

RLSA-2026:6388 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For...

Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For...

ALSA-2026:7009 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For...