Skip to content
Fencer Intel

All · bitnami

Newest first, late arrivals on top. Also a feed.

  1. 7.3
    CVE-2026-43870 Apache Thrift: Node.js web_server.js multi-vulnerability
    npmbitnami
  2. 7.3
    CVE-2026-43869 Apache Thrift: TSSLTransportFactory.java hostname verification
    mavenbitnami
  3. 6.5
    CVE-2026-41888 Distribution: Tag deletion bypasses `storage.delete.enabled` configuration
    gobitnami
  4. 4.9
    CVE-2026-42295 Argo Workflows: Exposure of artifact repository credentials
    gobitnami
  5. 8.1
    CVE-2026-42296 Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure
    gobitnami
  6. 7.5
    CVE-2026-42294 Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor
    gobitnami
  7. 6.5
    CVE-2026-42183 Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
    gobitnami
  8. 8.3
    CVE-2026-42297 Argo Workflows Is Missing Authorization in Sync ConfigMap Provider
    gobitnami
  9. 7.5
    CVE-2026-42154 Prometheus: remote read endpoint allows denial of service via crafted snappy payload
    gobitnami
  10. 7.5
    CVE-2026-42151 Prometheus Azure AD remote write OAuth client secret exposed via config API
    gobitnami
  11. 7.5
    CVE-2026-29169 Apache HTTP Server: mod_dav_lock indirect lock crash
    Apache HTTP Serverbitnami
  12. 8.8
    CVE-2026-23918 Apache HTTP Server: http2: double free and possible RCE on early reset
    Apache HTTP Serverbitnami
    1 public exploit EPSS 49.7% chance of exploitation in 30 days, percentile 98%
  13. 4.8
    CVE-2026-33006 Apache HTTP Server: mod_auth_digest timing attack
    Apache HTTP Serverbitnami
  14. 5.3
    CVE-2026-33007 Apache HTTP Server: mod_authn_socache crash
    Apache HTTP Serverbitnami
  15. 6.5
    CVE-2026-33523 Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line
    Apache HTTP Serverbitnami
  16. 5.3
    CVE-2026-33857 Apache HTTP Server: Off-by-one OOB reads in AJP getter functions
    Apache HTTP Serverbitnami
  17. 5.3
    CVE-2026-34032 Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)
    Apache HTTP Serverbitnami
  18. 7.5
    CVE-2026-34059 Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()
    Apache HTTP Serverbitnami
  19. 8.8
    CVE-2026-24072 Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr
    Apache HTTP Serverbitnami
  20. 7.5
    CVE-2026-42334 Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
    npmbitnami
  21. 8.4
    CVE-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
    npmpypibitnami
  22. 8.8
    CVE-2026-42557 jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content
    pypibitnami
  23. 8.8
    CVE-2026-42266 JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
    pypibitnami
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  24. 9.8
    CVE-2026-41586 ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE
    mavenbitnami
  25. 6.3
    CVE-2026-6915 Flaw in the updateUser Command May Allow Unauthorized Configuration Change
    MongoDBbitnami
  26. 6.5
    CVE-2026-6914 MD5 checksum creation may cause availability loss
    MongoDBbitnami
  27. 7.5
    CVE-2026-42198 pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS
    mavenbitnami
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  28. 7.5
    CVE-2026-41636 Apache Thrift: Node.js skip() recursion
    npmbitnami
  29. 9.1
    CVE-2026-41607 Apache Thrift: C++ JSON OOB read
    bitnami
  30. 7.5
    CVE-2026-41606 Apache Thrift: c_glib dispatch stack overflow
    bitnami
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%