Browsing: Alerts

HomeDescriptionThe Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login /…

For the oldstable distribution (bookworm), these problems have been fixedin version 2.10.34-1+deb12u10.For the stable distribution (trixie), these problems have been…

Access key was publicly available on GitHub for almost five years Source: Toyota does U-turn, confirms thousands of Australian customers…

Serial number: AV26-347Date: April 14, 2026 On April 14, 2026, Siemens published a security advisory to address vulnerabilities in the…

CVSSv3 Score: 6.2 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability [CWE-22] in FortiSandbox, FortiSandbox…

Serial number: AV26-348Date: April 14, 2026 On April 7, 2026, Samsung published a security update to address vulnerabilities in the…

Serial number: AV26-350Date: April 14, 2026 On April 14, 2026, Schneider Electric published advisories to address vulnerabilities in the following…

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the…

HomeDescriptionprotobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code…

On March 31, 2026, the Axios npm package was compromised via a maintainer account takeover. Two malicious versions were published…