CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency CISA maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive...

CLEANSTART-2026-SW24654 Security fixes for CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283 applied in versions: 3.2.1-r0

Multiple security vulnerabilities affect the aws-load-balancer-controller package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-RC8C-94M4-FRFH vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

GHSA-463M-22HH-CHVM vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

CVE-2026-43100 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

CVE-2026-31609 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

GHSA-JG3H-4JH8-MFWR vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

GHSA-H53C-6597-VMFW vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

GHSA-585P-9MG2-6VMM vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

GHSA-R5QW-5M8Q-6774 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

CVE-2026-43109 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

CVE-2026-31592 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-qemu, linux-aws, linux-vmware...

CVE-2026-44308

Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support @NotificationMessageMapping, @NotificationSubscriptionMapping, @NotificationUnsubscribeConfirmationMapping did n...

Using Bedrock with Claude Code? Your AWS Credentials Are Shared With Every Subprocess

Many developers today are using Claude Code, with a growing portion running it through Amazon Bedrock. For enterprise teams, Bedrock offers major advantages: keeping data inside a VPC, leveraging AWS credits, and integrating with existing IAM controls, monitoring, and security policies. Bedrock...

Malicious Package

Overview knot-activesupport-logger is a malicious package. This package is part of a malicious cluster of Ruby gems published by the threat actor knot-theory. Designed to impersonate legitimate utilities, it executes a payload upon installation that harvests environment variables, SSH keys, AWS...

Gotenberg 代码问题漏洞

Gotenberg is an open-source, developer-friendly API developed by Gotenberg. It is used to convert various document formats into PDF files. Versions of Gotenberg prior to 8.31.0 contained code vulnerabilities. These vulnerabilities stemmed from the default rejection list using regular expressions...

CVE-2026-35062

CVE-2026-35062 affects F5 BIG-IP and related iControl SOAP components. An authenticated iControl SOAP user may obtain information about other accounts, a control-plane issue with no data-plane exposure. Impact described as a low-privileged remote attacker potentially accessing other local account...

CVE-2026-42175 requests-hardened: Server-Side Request Forgery (SSRF) in requests-hardened RFC 6598

requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features. Prior to , the SSRF protection in requests-hardened fails to block IP addresses within the RFC 6598 Shared Address Space 100.64.0.0/10. An attacker who can supply arbitrary...

CVE-2026-43929 ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs

ssrfcheck is a library that checks if a string contains a potential SSRF attack. In 1.3.0 and earlier, ssrfcheck fails to block Server-Side Request Forgery attacks when the target private IP address is encoded as an IPv4-mapped IPv6 address e.g. http://::ffff:127.0.0.1/. The WHATWG URL parser bui...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential stealer worm. A malicious actor managed to extract a GitHub Actions OIDC token from the runner process and publish tampered versions of 42 @tanstack/ packages to npm, which then spread ...