CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66377

    🚨 CVE-2026-66377 An unauthenticated user may access restricted repository information under specific conditions.

  • CVE-2026-66378

    🚨 CVE-2026-66378 An authenticated user without repository read permission may access private NuGet metadata under specific conditions.

  • CVE-2026-66379

    🚨 CVE-2026-66379 An authenticated user may view private Puppet module metadata without repository read access.

  • CVE-2026-66380

    🚨 CVE-2026-66380 An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.

  • CVE-2026-66381

    🚨 CVE-2026-66381 A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.

  • CVE-2026-66382

    🚨 CVE-2026-66382 An authenticated user may write files outside the intended Artifactory work directory under specific conditions.

  • CVE-2026-68752

    🚨 CVE-2026-68752 A Project Resource Manager may gain broader administrative privileges under specific conditions.

  • CVE-2026-68753

    🚨 CVE-2026-68753 An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a...

  • CVE-2026-68754

    🚨 CVE-2026-68754 A repository publisher without delete permission may modify protected package content under specific conditions.

  • CVE-2026-68755

    🚨 CVE-2026-68755 A bundle writer may create misleading release promotion information under specific conditions.

  • CVE-2026-68756

    🚨 CVE-2026-68756 A party with write access to stored session data may affect JFrog Artifactory under specific conditions.

  • CVE-2026-68757

    🚨 CVE-2026-68757 A user with access to a valid SAML response may impersonate another user under specific conditions.

  • CVE-2026-68760

    🚨 CVE-2026-68760 An unauthenticated user may bypass authentication under specific cache conditions.

  • CVE-2026-54183

    🚨 CVE-2026-54183 Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's...

  • CVE-2026-58076

    🚨 CVE-2026-58076 Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the...

  • CVE-2026-59242

    🚨 CVE-2026-59242 Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through...

  • CVE-2026-59244

    🚨 CVE-2026-59244 Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI — the...

  • CVE-2026-65017

    🚨 CVE-2026-65017 Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an...

Статистика статей

Статьи
53,088
Просмотры
264,220
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху