Recent changes
Records added, updated or removed by each recent sync. RSS feed
| Synced (UTC) | Change | CVE | Severity | Summary |
|---|---|---|---|---|
| 2026-10-23 05:49 | updated | CVE-2026-93017 | High 7.7 | Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader |
| 2026-10-23 05:49 | updated | CVE-2026-85518 | Medium 6.1 | Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition |
| 2026-10-23 05:49 | updated | CVE-2026-83589 | Medium 6.1 | Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect |
| 2026-10-23 05:49 | updated | CVE-2026-75888 | High 7.7 | Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch |
| 2026-10-23 05:49 | updated | CVE-2026-75887 | High 7.5 | Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler |
| 2026-10-23 05:49 | updated | CVE-2026-75885 | Critical 9.3 | Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint |
| 2026-10-23 05:49 | updated | CVE-2026-49329 | High 7.5 | Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login... |
| 2026-10-23 05:49 | new | CVE-2026-107858 | High 7.2 | Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server |