Known Vulnerabilities for Baseline by Hulumi
Listed below are 10 of the newest known vulnerabilities associated with "Baseline" by "Hulumi".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93241 json | In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks... | Not Provided | 2026-09-24 | 2026-09-25 |
| CVE-2026-82863 json | @hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging conf... | Not Provided | 2026-08-31 | 2026-08-31 |
| CVE-2026-75836 json | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack) before 1.0.14 fails to enforce the au... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-72826 json | The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of... | Not Provided | 2026-08-14 | 2026-08-24 |
| CVE-2026-72823 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope cap bypass in DemoController. Its priva... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-65007 json | The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin ... | Not Provided | 2026-07-21 | 2026-07-23 |
| CVE-2026-48824 json | Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw (CVE-2026-4... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-45819 json | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameter... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-14540 json | A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbo... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2025-22012 json | In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on ap... | Not Provided | 2025-04-08 | 2026-07-30 |