Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-wr93-w764-3636 |
|
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesti… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-w8cx-4cf2-9hvr |
8.7 (4.0)
|
Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that modu… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-q84r-gp7c-vfr3 |
|
A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do expone… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-j9vw-9527-3hx6 |
3.5 (3.1)
2.0 (4.0)
|
A flaw has been found in Hyve5 Leantime up to 3.9.8. Affected by this vulnerability is the function… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-cw6x-vx7r-8x4q |
|
A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which … | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-8xvj-2pjr-73jq |
|
When Neethi fetches a remote policy reference, it only limits the time per read, not the whole tran… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-6vm6-6w33-f874 |
|
A small WS-Policy document using repeated policy references can force Neethi to re-expand the same … | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-5p5f-qvx9-whpj |
7.1 (3.1)
|
A flaw was found in the signature verification logic of noobaa-core, the core component of the NooB… | 2026-09-21T12:32:39Z | 2026-09-21T12:32:39Z |
| ghsa-vrgw-vghm-5p74 |
7.2 (4.0)
|
Temporal Server decided whether a Workflow completion callback was internal by reading a caller-sup… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-vg3p-fxfm-m684 |
8.7 (4.0)
|
github.com/temporalio/tchannel-go did not reject TChannel call fragments containing checksum metada… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-2mhp-wpjp-pjr8 |
8.7 (4.0)
|
github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TCha… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-2cw5-f255-55f8 |
8.7 (4.0)
|
github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application change… | 2026-09-21T12:32:38Z | 2026-09-21T12:32:38Z |
| ghsa-pv35-7w89-v65c |
7.1 (4.0)
|
Temporal Server did not bound the work performed while searching for a Schedule's next action time.… | 2026-09-21T12:32:37Z | 2026-09-21T12:32:37Z |
| ghsa-g9jq-gq4v-4rw3 |
8.7 (4.0)
|
temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version c… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:37Z |
| ghsa-7vcf-7m3r-v7x3 |
8.7 (4.0)
|
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a corres… | 2026-09-21T12:32:37Z | 2026-09-21T12:32:37Z |
| ghsa-rf8x-cp2v-q2fg |
5.1 (4.0)
|
Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in the client-side re… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-mhq8-392f-7m6m |
8.8 (3.1)
|
A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious che… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-gm83-3hcx-j6jj |
1.0 (4.0)
|
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable … | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-g33h-rrj9-75qv |
7.4 (3.1)
|
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificate… | 2026-09-16T18:32:03Z | 2026-09-21T12:32:36Z |
| ghsa-8mcv-mp35-55rc |
6.3 (4.0)
|
MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galax… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-5q8h-fhcg-2395 |
5.3 (4.0)
|
Improper handling of highly compressed data (data amplification) in Checkmk <2.5.0p14, <2.4.0p37, <… | 2026-09-21T12:32:36Z | 2026-09-21T12:32:36Z |
| ghsa-vh9j-mvrr-922q |
8.7 (3.1)
|
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which d… | 2026-08-10T21:32:06Z | 2026-09-21T12:32:33Z |
| ghsa-v6pg-cp3x-x49r |
8.8 (3.1)
|
A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edi… | 2026-08-10T21:32:07Z | 2026-09-21T12:32:33Z |
| ghsa-qw34-v3jw-3crv |
8.1 (3.1)
|
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user wit… | 2026-08-10T21:32:06Z | 2026-09-21T12:32:33Z |
| ghsa-p5f2-j2p5-7p7v |
9.6 (3.1)
|
A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() f… | 2026-08-18T18:31:57Z | 2026-09-21T12:32:33Z |
| ghsa-h7xh-qc2m-rc58 |
8.8 (3.1)
|
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI o… | 2026-08-10T21:32:07Z | 2026-09-21T12:32:33Z |
| ghsa-g6qh-932v-chpq |
8.8 (3.1)
|
A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vu… | 2026-08-10T21:32:06Z | 2026-09-21T12:32:33Z |
| ghsa-g68c-wmxr-x3rh |
7.1 (3.1)
|
A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper a… | 2026-08-10T21:32:06Z | 2026-09-21T12:32:33Z |
| ghsa-cr6h-6g58-pq2g |
7.5 (3.1)
|
A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, makin… | 2026-08-10T21:32:06Z | 2026-09-21T12:32:33Z |
| ghsa-8jj2-p7p7-6mr3 |
9.9 (3.1)
|
A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a us… | 2026-08-17T21:31:24Z | 2026-09-21T12:32:33Z |