179 matches found
GO-2026-6505 vulnerabilities
Vulnerabilities for packages: skopeo-fips, nifikop, gatus, nuclio-controller-fips, tetragon-fips, bank-vaults-fips, k8s-agents-operator-fips, flux-notification-controller-fips, kubernetes-csi-external-provisioner, neuvector-scanner-fips, keda-http-add-on, harbor-registry-fips, guac, jobset-fips,...
PT-2026-85596
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8.2.2.1 IBM DevOps Deploy / IBM UrbanCode Deploy UCD is susceptible to an formation disclosure vulnerability when processing...
CVE-2026-12084
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...
EUVD-2026-40392
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...
PT-2026-53967
Name of the Vulnerable Software and Affected Versions IBM DevOps Deploy versions 8.1 through 8.1.2.6 IBM DevOps Deploy versions 8.2 through 8.2.1.0 Description Cross-Origin Resource Sharing CORS, a mechanism that allows restricted resources on a web page to be requested from another domain, is...
CVE-2025-14148
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...
CVE-2025-13489
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...
PT-2025-51280
Name of the Vulnerable Software and Affected Versions IBM DevOps Deploy versions 8.1 through 8.1.2.3 Description An authenticated user with LLM integration configuration privileges may be able to recover a previously saved LLM API Token. Recommendations Update to a version later than 8.1.2.3...
PT-2025-51279
Name of the Vulnerable Software and Affected Versions IBM DevOps Deploy versions 8.1 through 8.1.2.3 Description IBM DevOps Deploy transmits data in clear text, potentially allowing an attacker to intercept sensitive information using man-in-the-middle techniques. Recommendations Update to a...
CVE-2025-14148: Insufficiently Protected Credentials
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: skopeo-fips, speedtest-go, nvidia-nsight-compute-13.2, kubecolor, azure-ipam, harbor-registry-fips, guac, iptables-wrappers, azuredisk-csi-fips, cfssl, kubeflow-katib, cluster-api, manifest-tool, restic, gitlab-rails-ce, spire-controller-manager-fips, fq,...
RUSTSEC-2025-0098 `unic-ucd-version` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...
alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +24 more potentially affected by unknown CVE via unic-ucd-common (>=0.7.0, <=0.9.0)
unic-ucd-common CARGO version =0.7.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.1.0, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0101...
alemat (>=0.3.0, <=0.8.0), audio-processor-analysis (>=0.1.0-alpha.4, <=2.4.0) +98 more potentially affected by unknown CVE via unic-ucd-bidi (>=0.1.1, <=0.9.0)
unic-ucd-bidi CARGO version =0.1.1, =0.3.0, =0.1.0-alpha.4, =0.3.0, =0.4.0, =0.0.0, =0.2.4-beta, =0.7.0, =0.4.0, =0.7.0, =0.8.3 - druid-ui 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0083...
alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +26 more potentially affected by unknown CVE via unic-ucd-normal (>=0.1.2, <=0.9.0)
unic-ucd-normal CARGO version =0.1.2, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0078...