CVE Vulnerabilities - 16 July 2026

Attackers can inject malicious data into Kubernetes manifests, potentially creating unauthorized resources like privileged pods. This is possible because Jupyter Enterprise Gateway interpolates untrus...

The Jupyter Enterprise Gateway allows malicious users to execute code and access sensitive Kubernetes data, potentially compromising the entire cluster. This vulnerability affects any organization usi...

HireFlow's interview management system had a security issue that allowed attackers to gain access to admin accounts. This could have let unauthorized people control the system and make changes. HireFl...

The Root:npm vm2 package had a security flaw that could allow an attacker to execute malicious code on a server. This could lead to unauthorized access or data theft. Root has released patched version...

If you're using Root's npm package and haven't updated vm2 recently, you may be at risk of a security issue. This issue has been fixed by Root in newer versions of vm2. We recommend updating to the la...

The @rootio/vm2 package in Root:npm has a memory access issue that could be exploited by attackers. This could lead to unauthorized data access or system crashes. Update to a fixed version of @rootio/...

A security patch has been released for the Root VM2 software to prevent unauthorized access. This affects users of Root's npm package. To stay secure, update to a patched version of the software as so...

The Root VM2 software has a security issue that could allow unauthorized access. This issue affects users who rely on the software for secure operations. To stay secure, update to the latest patched v...

A security patch has been released for the Root VM2 package. This update is important for users of Root's npm package to protect against potential security risks. You should check for and install the ...

The @rootio/vm2 package for Root:npm was previously vulnerable, but Root has since released a patch. Update to a fixed version to prevent potential security risks. Multiple patched versions are availa...

A bug in Frogman allowed attackers with special permissions to inject malicious code into the Asterisk configuration, potentially allowing them to control the phone system. This issue has been fixed i...

The Zoom Workplace VDI Plugin for Windows has a security weakness that could allow an unauthorized user to access and take control of a user's account through the network. This is a serious issue beca...

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohi...

The /ureport/datasource/previewData component of ureport v2.2.9 has a security weakness that could allow unauthorized access to sensitive database information. This is a serious issue because it could...

Pheditor's default 'admin' password is hardcoded and cannot be changed. This allows attackers to access the entire application, including file editing, uploading, and executing code. To fix this, chan...

An attacker can access Grafana OnCall without a password by sending a specific request to the plugin install endpoint. This allows them to create new users, revoke legitimate access, and redirect API ...

A vulnerability in Yamcs's Mission Database allows an attacker with ChangeMissionDatabase privilege to execute arbitrary code on the server. This could lead to unauthorized access or data tampering. T...

The Yamcs authentication endpoint does not limit the number of login attempts, making it vulnerable to brute-force attacks. This means an attacker can try many passwords without being blocked. To prot...

A library used in Image::EPEG for Perl is outdated and has not been updated since 2004. This can make it vulnerable to security issues and may not work properly with modern systems. It's recommended t...

Kopia's HTTP server allows unauthenticated access when started without a username or password. An attacker can inject malicious commands into the SSH connection, potentially executing arbitrary code a...

An attacker can intercept and alter server responses, potentially gaining access to user accounts. This affects the security of user data and authentication processes in HCL DFXAnalytics. To mitigate ...

A security patch has been released for the Root:npm vm2 package to prevent untrusted code from executing on your system. This affects users who have installed vm2 through Root:npm. You should update t...

The Root VM2 software had a security issue that allowed unauthorized access to internal services. This could have allowed attackers to access sensitive information or take control of the system. Root ...

A security patch has been released for Root's VM2 package. This patch fixes a security issue that could have allowed unauthorized access to Root's systems. To stay secure, update to the latest version...

The @rootio/vm2 package in Root:npm contains a security issue that could allow attackers to execute malicious code on virtual machines. This is a concern because it could be used to take control of th...