Known Vulnerabilities for Workspaces by Amazon
Listed below are 2 of the newest known vulnerabilities associated with "Workspaces" by "Amazon".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121453 json | SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace ... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120461 json | Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves command te... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120460 json | Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage ... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120325 json | A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element is the function writeFile of ... | Not Provided | 2026-11-02 | 2026-11-06 |
| CVE-2026-119713 json | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to se... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119282 json | Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 and 23.1.2 for @nx/maven, and from ... | Not Provided | 2026-10-29 | 2026-11-03 |
| CVE-2026-117626 json | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file bro... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-113359 json | Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values f... | Not Provided | 2026-10-20 | 2026-10-21 |
| CVE-2026-111930 json | Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint, whi... | Not Provided | 2026-10-17 | 2026-10-19 |
| CVE-2026-111928 json | Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/policy.... | Not Provided | 2026-10-17 | 2026-10-19 |