Vulnerabilities
Azure Key Vault SSRF in Kroxylicious Exposes Bearer Tokens
A flaw in the Azure Key Vault provider allows attackers to steal tokens via server-side request forgery, breaking encryption trust.
Red Hat
Everything Patch Gazette has reported about Red Hat: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Unauthenticated gvproxy Endpoint Enables Arbitrary Host File Deletion
A critical path traversal flaw in gvproxy allows attackers to delete files on the host system via an unvalidated socket path parameter.