CVE-2026-68872

CVE-2026-68872 affects Apache Airflow’s Amazon provider backends for SSM and Secrets Manager in multi-team deployments. The issue arises when a team-scoped lookup falls back to a team-agnostic path if the team-scoped lookup misses, allowing a caller in one team to resolve a secret belonging to an...

CVE-2026-68871

Technical details about CVE-2026-68871 are not publicly available in the provided documents; monitor for updates.

CVE-2026-27883

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the GET /api/v1/deployments/uuid endpoint allows any authenticated user to access deployment details belonging to any team, bypassing team-based authorization. The $teamId ...