1254 matches found
CLEANSTART-2026-OA82425 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-workflows package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-IA56615 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-workflows package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-UQ43569 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-workflows package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-DV04077 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-workflows-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
Security Insights Where Work Happens: Notion Custom Agents + Wiz MCP
Bring Wiz cloud security insights into your Notion workspace with Custom Agents — enabling automated reporting, investigation, and security workflows where teams already work...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: sops, loki-fips, crossplane-provider-sql, vault, sftpgo-plugin-eventstore, elastic-agent, witness, juicefs, envoy-gateway-fips, gitea-fips, step-fips, certificate-transparency, hydra-fips, beats, ksops, prometheus-mysqld-exporter, rke2-runtime, trillian-fips,...
LibreNMS 跨站脚本漏洞
LibreNMS is an open-source network monitoring system developed by the LibreNMS community, based on PHP and MySQL. This system features custom alerts, automatic discovery of networks, and automatic updates. Versions of LibreNMS prior to 25.12.0 contained a cross-site scripting vulnerability. This...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: kots, nri-mysql, spire-server, db-operator, ratify, step-kms-plugin, crossplane-provider-sql, splunk-otel-collector, juicefs, kine, rekor, ksops, sops, sftpgo-plugin-eventstore, timestamp-authority, tkn, step, chezmoi, apko, kyverno-policy-reporter, loki, openfga,...
6 Best Exposure Management Cybersecurity Platforms
How do you know if your security controls will actually stop an attack? You can have the best firewalls and endpoint protection on the market, but misconfigurations or undiscovered assets can render them useless. This is the fundamental question that traditional vulnerability management can't...
3 Ways to Start Your Intelligent Workflow Program
Security, IT, and engineering teams today are under relentless pressure to accelerate outcomes, cut operational drag, and unlock the full potential of AI and automation. But simply investing in tools isn’t enough. 88% of AI proofs-of-concept never make it to production, even though 70% of workers...
CVE-2026-23598
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...
Unify now or pay later: New research exposes the operational cost of a fragmented SOC
Security operations are entering a pivotal moment: the operating model that grew around network logs and phishing emails is now buckling under tool sprawl, manual triage, and threat actors that outpace defender capacity. New research from Microsoft and Omdia shows just how heavy the burden can...
Building the Future of Cloud Security: Rapid7 Recognized in Cloud Native Application Protection, Q1 2026
We are excited to share Rapid7’s recognition in The Forrester Wave™: Cloud Native Application Protection Solutions CNAPP , Q1 2026 1. We see this acknowledgment as a milestone that highlights our strategic evolution and continued drive to help security teams shift from reactive defense to...
GHSA-W7FW-MJWX-W883 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, librechat, argo-workflows, kubeflow-katib, arangodb, sqlpad, json-server, langfuse, py3-jupyterlab, tensorflow-cpu-jupyter, kubeflow-centraldashboard, redisinsight, code-server, opensearch-dashboards, thingsboard, gitlab-rails-ce,...
CVE-2026-2391 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, librechat, argo-workflows, kubeflow-katib, arangodb, sqlpad, json-server, langfuse, py3-jupyterlab, tensorflow-cpu-jupyter, kubeflow-centraldashboard, redisinsight, code-server, opensearch-dashboards, thingsboard, gitlab-rails-ce,...
CLEANSTART-2026-VG57433 Within HostnameError
Multiple security vulnerabilities affect the argo-workflows package. Within HostnameError. See references for individual vulnerability details...
vulnerability-assessment-lab
vulnerability-assessment-lab Controlled security test...
n8n Node.js Package < 1.123.9 / 2.x < 2.2.1 Stored XSS (CVE-2026-25054)
The version of the n8n Node.js Package installed on the remote host is prior to 1.123.9, or 2.x prior to 2.2.1. It is, therefore, affected by a stored cross-site scripting vulnerability: - A cross-site scripting XSS vulnerability existed in a markdown rendering component used in n8n's interface,...
PT-2026-7972
Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to V5.0 Description The application does not properly restrict unauthenticated connections, making it susceptible to resource exhaustion. This condition allows an attacker to disrupt normal operations or perform...
CVE-2026-25761
Super-linter is a combination of multiple linters to run as a GitHub Action or standalone. From 6.0.0 to 8.3.0, the Super-linter GitHub Action is vulnerable to command injection via crafted filenames. When this action is used in downstream GitHub Actions workflows, an attacker can submit a pull...