Known Vulnerabilities for CF Deployment by Cloud Foundry Foundation
Listed below are 10 of the newest known vulnerabilities associated with "CF Deployment" by "Cloud Foundry Foundation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49267 json | Apache Airflow's EmailOperator and the underlying `airflow.utils.email` helpers established SMTP STARTTLS connections without... | Not Provided | 2026-06-01 | 2026-06-02 |
| CVE-2026-48545 json | Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space se... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48116 json | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. P... | Not Provided | 2026-05-28 | 2026-05-30 |
| CVE-2026-47672 json | epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In 1.2.4 and earlier, any network-rea... | Not Provided | 2026-05-26 | 2026-05-27 |
| CVE-2026-47125 json | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environme... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-46685 json | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, when RUSTFS_CORS_ALLOWED_ORIGINS is unset... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-46124 json | In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in iso... | Not Provided | 2026-05-28 | 2026-06-01 |
| CVE-2026-45661 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability... | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-45629 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in t... | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-45192 json | A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API us... | Not Provided | 2026-06-01 | 2026-06-01 |