PT-2026-56458

Name of the Vulnerable Software and Affected Versions TrustyAI Service Operator affected versions not specified Description A flaw in the TrustyAI Service Operator occurs when deploying services such as gorch or NemoGuardrails. If a specific security setting is not enabled, these services expose...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: spire-server-fips, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-orbital, crossplane-function-patch-and-transform, crossplane-provider-aws-s3-fips, scorecard, k8s-image-swapper-fips, terraform-fips, coredns, vertical-pod-autoscaler,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: spire-server-fips, crossplane-provider-azure-powerbidedicated, crossplane-provider-azure-orbital, crossplane-function-patch-and-transform, crossplane-provider-aws-s3-fips, scorecard, k8s-image-swapper-fips, terraform-fips, coredns, vertical-pod-autoscaler,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: kuma, goose, spire-server-fips, gitlab-kas, gitaly, vault-fips, argo-workflows, dapr, caddy, teleport, step-ca, chainloop-control-plane-fips, gitness, kots, grafana-alloy-fips, goose-fips, flyte, pgtimetable, commercial-chainloop-backend, openbao, src, temporal-fips,...

CVE-2025-22874 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, flannel-cni-plugin, sbom-convert, postgres-operator, age, smarter-device-manager, aws-application-networking-k8s, rancher-webhook, amazon-cloudwatch-agent, filebrowser, steampipe, velero-plugin-for-microsoft-azure, haproxy-ingress,...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, flannel-cni-plugin, sbom-convert, postgres-operator, age, smarter-device-manager, aws-application-networking-k8s, rancher-webhook, amazon-cloudwatch-agent, filebrowser, steampipe, velero-plugin-for-microsoft-azure, haproxy-ingress,...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, flannel-cni-plugin, sbom-convert, postgres-operator, age, smarter-device-manager, aws-application-networking-k8s, rancher-webhook, amazon-cloudwatch-agent, filebrowser, steampipe, velero-plugin-for-microsoft-azure, haproxy-ingress,...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: dive, authservice, cortex, flannel-cni-plugin, sbom-convert, postgres-operator, age, smarter-device-manager, aws-application-networking-k8s, rancher-webhook, amazon-cloudwatch-agent, filebrowser, steampipe, velero-plugin-for-microsoft-azure, haproxy-ingress,...

File Upload Vulnerability in the Command and Dispatch Management Platform of Fujian Qualicom Communication Co.

Fujian Qualicom Communication Co., Ltd. is a solution provider and service operator focusing on professional communication. A file upload vulnerability exists in the Command and Dispatch Management Platform of Fujian Qualicom Communication Co. Ltd. that can be exploited by an attacker to upload a...