EUVD-2024-25942

Malicious code in bioql PyPI...

EUVD-2025-27598

Malicious code in bioql PyPI...

CVE-2025-8696

If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server. This issue affects Stork versions 1.0.0 through 2.3.0...

Memory Allocation with Excessive Size Value

Overview isc.org/stork/backend/server/restservice is an open source ISC project providing a monitoring application and dashboard for ISC Kea DHCP and eventually ISC BIND 9. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the http.Handler functio...

CVE-2025-8696

The CVE-2025-8696 issue affects ISC Stork UI/server versions 1.0.0 through 2.3.0, where an unauthenticated client that sends large amounts of data can cause memory and disk usage problems on the Stork server. This is described consistently across multiple sources (NVD, RH, CVE listing, and Snyk) ...

CVE-2024-28872

The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to a monitored service Kea or BIND 9,...

CVE-2024-28872 Incorrect TLS certificate validation can lead to escalated privileges

The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to a monitored service Kea or BIND 9,...

CVE-2024-28872 Incorrect TLS certificate validation can lead to escalated privileges

The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to a monitored service Kea or BIND 9,...

CVE-2024-28872

The CVE-2024-28872 issue affects ISC Stork versions 0.15.0 through 1.15.0 and stems from flawed TLS certificate validation. An attacker could obtain a TLS certificate from the Stork server and use it to connect to the Stork agent, then issue malicious commands to monitored services (Kea or BIND 9...