PT-2026-37288

Name of the Vulnerable Software and Affected Versions s3-proxy versions prior to 0.0.0-20260424211602-1320e4abd46a Description Inconsistent URL path normalization and routing logic lead to authorization bypasses, allowing unauthenticated access to protected objects. The issues stem from a mismatc...

CVE-2026-42810 Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names

Apache Polaris accepts literal characters in namespace and table names. When it later builds temporary S3 access policies for delegated table access, those same characters appear to be reused unescaped in S3 IAM resource patterns and s3:prefix conditions. In S3 IAM policy matching, is treated as ...

CVE-2026-42810 Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names

Apache Polaris accepts literal characters in namespace and table names. When it later builds temporary S3 access policies for delegated table access, those same characters appear to be reused unescaped in S3 IAM resource patterns and s3:prefix conditions. In S3 IAM policy matching, is treated as ...

PT-2026-37193

Name of the Vulnerable Software and Affected Versions Argo Workflows versions 4.0.0 through 4.0.4 Description The workflow executor logs artifact repository credentials in plaintext during artifact operations. This occurs because the logging driver passes the entire ArtifactDriver struct to the...

PT-2026-36669

Name of the Vulnerable Software and Affected Versions Apache Polaris version 1.4.0 Description Apache Polaris allows the use of literal characters in namespace and table names. These characters are reused unescaped in S3 IAM resource patterns and s3:prefix conditions when building temporary S3...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-33551

A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full se...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, ingress-nginx-controller, oras, grafana-rollout-operator, tailscale, dataplaneapi, aws-privateca-issuer, nova, stakater-reloader, aws-network-policy-agent, pluto, secrets-store-csi-driver-provider-aws, envoy-ratelimit,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, flux, eksctl, helm-mapkubeapis, helm-set-status, litefs, grafana-pyroscope, terraform-provider-pagerduty, trivy-operator, smarter-device-manager, lazygit, karpenter,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, flux, eksctl, helm-mapkubeapis, helm-set-status, litefs, grafana-pyroscope, terraform-provider-pagerduty, trivy-operator, lazygit, karpenter, k8sgpt-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, pguser, newrelic-fluent-bit-output, fuse-overlayfs-snapshotter, ghaudit, flux, eksctl, helm-mapkubeapis, helm-set-status, litefs, grafana-pyroscope, terraform-provider-pagerduty, trivy-operator, lazygit, karpenter, k8sgpt-operator,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: grafana-operator, karpenter, nodetaint-fips, flux-image-reflector-controller, volume-modifier-for-k8s, mariadb-operator-fips, sealed-secrets-fips, nova-fips, github-mcp-server, flux-notification-controller, rabbitmq-messaging-topology-operator-fips,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: grafana-operator, karpenter, nodetaint-fips, flux-image-reflector-controller, volume-modifier-for-k8s, mariadb-operator-fips, sealed-secrets-fips, nova-fips, github-mcp-server, flux-notification-controller, rabbitmq-messaging-topology-operator-fips,...

Incorrect Authorization

Overview keystone is a package that provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. Affected versions of this package are vulnerable to Incorrect Authorization through the UserOSEC2CredentialsResourceListCreat...

PT-2026-31855

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0 Description A flaw exists in OpenStack Keystone where restricted application credentials can be used to create EC2 credentials. An authenticated user with a...

CVE-2026-33786

An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon chassisd of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a local attacker with low privileges to cause a complete Denial of Service DoS. When a specific 'show chassis' CLI comma...

CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

CVE-2026-33779

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

CVE-2026-21916

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

Juniper Networks Junos OS SRX 代码问题漏洞

Juniper Networks Junos OS SRX is a network operating system specifically designed for hardware devices used by Juniper Networks. This operating system provides secure programming interfaces and the Junos SDK. There are code vulnerabilities in Juniper Networks Junos OS on SRX1600, SRX2300, and...