Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/06/08 11:8 p.m.24 views

nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

internal/configgen/generator.go:86,108,119 interpolates the operator-supplied ListenHost and TunDevice fields raw into a text/template that produces the agent's config.yml. internal/web/advanced.go:20-35 accepts both with only strings.TrimSpace — no character or shape validation. Exploit An...

8.7CVSS5.5AI score0.00269EPSS
SaveExploits0References4Affected Software1
SUSE Linux
SUSE Linux
added 2025/08/27 12:5 p.m.2 views

Security update for ignition

This update for ignition fixes the following issues: CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input bsc1248548 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.5CVSS7.3AI score0.03965EPSS
SaveExploits1References4
Rows per page
Query Builder