CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, authservice, swagger, cortex, knative-eventing, kaf, kubernetes-dashboard-auth, kube-state-metrics, terraform-provider-google, terraform-provider-azapi, docker-compose, spicedb, net-kourier, kserve-modelmesh-serving,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: authservice, cortex, crane, nri-kubernetes, net-kourier, cloudflared, sbom-convert, postgres-operator, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, aws-application-networking-k8s, rancher-webhook, cilium, trino,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: authservice, cortex, crane, nri-kubernetes, net-kourier, cloudflared, sbom-convert, postgres-operator, smarter-device-manager, container-object-storage-interface, cluster-autoscaler, tigera-operator, aws-application-networking-k8s, rancher-webhook, cilium, trino,...

Backstage 日志信息泄露漏洞

Backstage is an open-source application developed by Backstage. It serves as an open platform for building developer portals. Versions of Backstage prior to 3.1.4 contained a vulnerability related to log information leakage. This vulnerability stemmed from malicious scaffolding templates that cou...

CVE-2024-34913

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file...

EUVD-2024-2470

Malicious code in bioql PyPI...

EUVD-2024-35107

Malicious code in bioql PyPI...

Malicious code in test-mlw2-clour-heats-nards-scaff (npm)

The package test-mlw2-clour-heats-nards-scaff was found to contain malicious code...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: up, policy-controller, rclone, cortex, flux-image-reflector-controller, tekton-chains, spire-server, buildkitd, flux-source-controller, nuclei, opentelemetry-collector, guac, hugo, k8sgpt, kubescape, fluent-bit-plugin-loki, harbor-registry, druid,...

CVE-2024-34913

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file...

CVE-2024-34913

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file...

CVE-2024-34913

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file...

CVE-2024-34913

An arbitrary file upload vulnerability in r-pan-scaffolding v5.0 and below allows attackers to execute arbitrary code via uploading a crafted PDF file...

CVE-2024-34913

The CVE-2024-34913 entry impacts r-pan-scaffolding versions 5.0 and older, where an arbitrary file upload vulnerability allows an attacker to execute arbitrary code by uploading a crafted PDF. The root cause is an improper handling of PDF uploads in the file-upload functionality, enabling code ex...

PT-2024-26246 · Unknown · R-Pan-Scaffolding

Name of the Vulnerable Software and Affected Versions: r-pan-scaffolding versions 5.0 and below Description: The issue allows attackers to execute arbitrary code via uploading a crafted PDF file. This is achieved through an arbitrary file upload vulnerability. Recommendations: For versions 5.0 an...

r-pan-scaffolding 安全漏洞

rubinchu r-pan-scaffolding is a simple file management system from rubinchu that implements file uploading, downloading, moving and other functions. A security vulnerability exists in r-pan-scaffolding v5.0 and earlier versions. An attacker can execute arbitrary code by uploading a specially...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, policy-controller, dex, temporal-ui-server, nerdctl, kargo, ko, wolfictl, spire-server, apko, gitsign, vexctl, frp, flux-source-controller, temporal, cloudflared, kots, weaviate, guac, dgraph, rabbitmq-messaging-topology-operator, kubescape,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: spire-server-fips, scorecard, vertical-pod-autoscaler, terraform-provider-sendgrid, gitness, minio, kots, sops, ctop, rabbitmq-cluster-operator, buildkitd, helm-operator-fips, kubernetes-dns-node-cache, prometheus-alertmanager-fips, temporal-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: cortex, kaf, memcached-exporter, terraform, weaviate, hugo, flux-kustomize-controller, flux-helm-controller, nghttp2, rqlite, conftest, atlantis, haproxy-ingress, aactl, kpt, nri-prometheus, hey, buildkitd, flux-source-controller, nginx-mainline,...

Design/Logic Flaw

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds...