Security advisories

medium2026-06-10

CVE-2026-48037-@hulumi/baseline: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture

kerberosmansour/hulumi · GHSA-cj8g-prcm-mfg5

high2026-06-10

CVE-2026-48036-@hulumi/drift: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts

kerberosmansour/hulumi · GHSA-32g3-35g9-wc9g

high2026-06-10

CVE-2026-48035-@hulumi/baseline: AccountFoundation audit-delivery S3 bucket could be silently weakened

kerberosmansour/hulumi · GHSA-2mxr-p26x-mj73

high2026-06-10

CVE-2026-48034-@hulumi/policies has a HULUMI-H5 bypass via decoy sibling resources targeting a different bucket

kerberosmansour/hulumi · GHSA-9vc9-4jv3-rf86

high2026-06-10

CVE-2026-48033-@hulumi/policies bypasses policy packs with a forged Pulumi-URN logical name

kerberosmansour/hulumi · GHSA-rhgj-6g2c-frmm

high2026-06-10

CVE-2026-48032-@hulumi/policies bypasses IAM-role policy checks when the role trusts multiple OIDC providers

kerberosmansour/hulumi · GHSA-g759-4pxw-6692

high2026-06-10

CVE-2026-10721-Concrete CMS: PHP Object Injection via unserialize() calls

concretecms/concretecms · GHSA-g82f-9pw7-773w

medium2026-06-10

CVE-2026-53675-BuddyPress: Any authenticated attacker can enumerate another user's complete friend list via IDOR

buddypress/buddypress · GHSA-wmjr-58rf-xgrc

high2026-06-10

CVE-2026-53673-BuddyPress: Authenticated attackers can access arbitrary private message threads via user_id request parameter

buddypress/buddypress · GHSA-j3j5-5m8v-7gvc

medium2026-06-10

CVE-2026-41726-In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header

spring-projects/spring-kafka · GHSA-xvfq-4q6q-gxx7

high2026-06-10

CVE-2026-41731-In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization

spring-projects/spring-kafka · GHSA-xq69-5h5v-x9x4

medium2026-06-10

CVE-2026-41719-Spring Data KeyValue: Remote code execution via SpEL Injection in Sort-based repository queries

spring-projects/spring-data-keyvalue · GHSA-xg2j-3hj6-pc24

medium2026-06-10

CVE-2026-41730-Spring Data REST potentially exposes persistence-layer internals to HTTP clients

spring-projects/spring-data-rest · GHSA-p5mm-xwgq-whfr

medium2026-06-10

CVE-2026-41837-Spring Data REST Querydsl Integration Exposes Persistent Property Paths, Bypassing Jackson Customizations

spring-projects/spring-data-rest · GHSA-mwpv-rg79-863c

high2026-06-10

CVE-2026-41729-Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests

spring-projects/spring-data-rest · GHSA-j388-8rm5-p97f

high2026-06-10

CVE-2026-41732-Spring for Apache Pulsar: JsonPulsarHeaderMapper Trusted-Package Prefix Check Allows Unintended Subpackage Deserialization

spring-projects/spring-pulsar · GHSA-gg69-9wwp-6jx2

high2026-06-10

CVE-2026-41728-Spring Data REST has Improper Access Control in its JSON Patch Implementation

spring-projects/spring-data-rest · GHSA-cv39-x4c6-hhp2

medium2026-06-10

CVE-2026-41727-Spring for Apache Kafka: Improper Validation of Retry Topic Header Values Leads to Retry Sequence Manipulation

spring-projects/spring-kafka · GHSA-53w6-v7cv-fc9h

medium2026-06-10

CVE-2026-41706-Spring Security: Open Redirect via Unvalidated Post-Login Redirect URL Stored in CookieRequestCache

spring-projects/spring-security · GHSA-x2r2-rvhq-2mqv

low2026-06-10

CVE-2026-41694-Spring Security SAML2 Service Provider: Decryption Oracle Vulnerability from Unsigned SAML Response and Logout Payloads

spring-projects/spring-security · GHSA-ww38-37g9-m3q3