Threats tagged 'bitnami'

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations (CVE-2026-15308) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146) * Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486) Bug Fix(es) and Enhancement(s): * Remove tomcat clustering JAR from RPM builds (JIRA:RHEL-183993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out_http output plugin allows placeholders such as ${tag} in the endpoint configuration parameter, and if a placeholder value is derived from untrusted input an attacker can control the destination hostname of outbound HTTP requests and force requests to arbitrary internal services. This issue is fixed in version 1.19.3.

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's in_http and in_forward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as body_size_limit and chunk_size_limit, allowing crafted compressed payloads to decompress in memory to an excessive size and cause denial of service through memory exhaustion. This issue is fixed in version 1.19.3.

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's Monitor Agent plugin in_monitor_agent exposes internal metrics and plugin information via a REST API, and responses from /api/plugins.json and related endpoints unintentionally include internal instance variables that may contain database passwords, API keys, or cloud credentials. This issue is fixed in version 1.19.3.

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allows dynamically constructing file paths using the ${tag} placeholder, and insufficient validation of ${tag} in file configurations such as the path parameter of the out_file plugin allows attackers sending untrusted tags containing path traversal characters to write or overwrite arbitrary files and potentially achieve remote code execution. This issue is fixed in version 1.19.3.

CVE-2026-58209 affects NATS Server versions prior to 2.14.3 and 2.12.12. It allows MQTT retained message delivery and QoS1+ durable replay to bypass subscription deny filters because these delivery paths do not consistently recheck the original topic against deny rules before delivering messages. This results in messages that should have been blocked being delivered. A fix is available in versions 2.14.3 and 2.12.12. The vulnerability has a medium severity with a CVSS score of 4.3.

NATS Server versions prior to 2.14.3 and 2.12.12 contain a vulnerability where an unauthenticated MQTT client can send partial CONNECT packets that cause the server to retain large incomplete packets in memory, leading to memory exhaustion. This issue is fixed in versions 2.14.3 and 2.12.12. No known exploits are reported in the wild.

NATS Server versions prior to 2.14.1 and 2.12.9 have a vulnerability where an MQTT client can inject protocol control characters into subscription filters. These characters are forwarded as NATS protocol data to route or leafnode connections, corrupting the protocol stream and enabling injection of unintended NATS commands. This issue is fixed in versions 2.14.1 and 2.12.9.

CVE-2026-58214 is a vulnerability in NATS Server versions prior to 2.14.3 and 2.12.12 where an authenticated MQTT client can bypass subscription access controls by subscribing to the internal $MQTT.deliver.pubrel subject prefix. This exposure allows access to MQTT QoS2 protocol metadata for sessions within the account. The issue is fixed in versions 2.14.3 and 2.12.12.

NATS Server versions prior to 2.12.8 and 2.11.17 have a vulnerability that allows an unauthenticated network peer to crash the server by sending repeated leafnode INFO protocol messages during the pre-authentication handshake when compression is enabled. This results in a denial of service by crashing the server before authentication and account setup complete. The issue is fixed in versions 2.12.8 and 2.11.17.

NATS Server versions prior to 2.14.0, 2.12.7, and 2.11.16 have an authorization bypass vulnerability. An authenticated user with subscription deny permissions could bypass a plain subject deny rule by using a queue subscription if the queue name itself was not denied. This vulnerability has been fixed in versions 2.14.0, 2.12.7, and 2.11.16.

NATS Server versions prior to 2.14.0, 2.12.7, and 2.11.16 have an authorization bypass vulnerability related to overlapping wildcard subscriptions. Authenticated users may receive messages on subjects that should be denied, and queue subscriptions may improperly affect message delivery. This issue has been fixed in versions 2.14.0, 2.12.7, and 2.11.16.

CVE-2026-58253 is an authentication bypass vulnerability in NATS Server versions prior to 2.14.0, 2.12.7, and 2.11.16. It affects route and leafnode listeners when the no_auth_user configuration is enabled, allowing an unauthenticated peer to bypass inter-server CONNECT authentication and gain associated privileges. The issue is fixed in versions 2.14.0, 2.12.7, and 2.11.16.

CVE-2026-58254 is a permission check bypass vulnerability in NATS Server affecting leaf node connections related to message trace destinations. It allows a leafnode operator to send trace events to unauthorized subjects, which may disrupt normal message delivery or storage. The vulnerability affects versions prior to 2.14.3 and 2.12.8 and is fixed in those versions.

A memory corruption vulnerability exists in the OpenSSL extension of PHP when using the AES-WRAP-PAD algorithm. This flaw affects PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, and 8.5.* before 8.5.8. The vulnerability arises because the output buffer is incorrectly sized, not accounting for the RFC 5649 expansion, leading to potential heap corruption and application abort.

An improper access check allows unauthorized users to create custom fields via webservices endpoints.

An improper access check allows unauthorized users to access com_privacy datasets.