3 matches found
EUVD-2026-29085
Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...
CVE-2025-0151
creationtimestamp| type| source ---|---|--- 2025-03-11 11:28:45+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lk3xm6jwfh2w 2025-03-11 19:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527668165612 2025-03-11 20:46:21+00:00| seen|...
CVE-2021-32690
Helm is a tool for managing Charts packages of pre-configured Kubernetes resources. In versions of helm prior to 3.6.1, a vulnerability exists where the username and password credentials associated with a Helm repository could be passed on to another domain referenced by that Helm repository. Thi...