This Week in Spring – April 19th, 2022

Hi, Spring fans! Welcome to another installment of _This Week in Spring_! It's been quite the week since we last talked! I flew to Atlanta, GA, for my first in-person show since the pandemic - Devnexu ...

Continue Reading
OWASP Coraza WAF – A Golang Modsecurity Compatible Web Application Firewall Library

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDIwzcZLeJuzWXppUYD064RlCGG9G9U2dQuxJNspnaX5IkUJYrTV9Q1tyOejKNEMT9Ch2nj1zOgvipfnS8aeGwvnbEsypqT16iKLA99igOo36scdZAxHTug93PD2iwzF2_igKCwe ...

Continue Reading
Improper Authentication

etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 is vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd cl ...

Continue Reading
resource-agents security update

[4.1.1-68] - azure-lb: fix redirect issue Resolves: rhbz#1850778 [4.1.1-67] - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz#1846733 [4.1.1-65] - azure-events: handle exceptio ...

Continue Reading
CVE-2021-28682

A flaw was found in envoyproxy/envoy. An attacker, able to craft a packet which specifies a large grpc-timeout, can potentially cause envoy to incorrectly calculate the timeouts resulting in a denial ...

Continue Reading
(RHSA-2020:5634) Moderate: OpenShift Container Platform 4.7.0 packages security update

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages ...

Continue Reading
Prototype Pollution in grpc/grpc-node

# Description `grpc` native core package is vulnerable to `Prototype Pollution`. This package allowing for modification of prototype behavior, which may result in Information Disclosure/DoS/RCE. # Pro ...

Continue Reading
Exploit for SQL Injection in Apache Skywalking

Apache SkyWalking ========== Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: