Known Vulnerabilities for Baseline by Hulumi
Listed below are 10 of the newest known vulnerabilities associated with "Baseline" by "Hulumi".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-82863 json | @hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging conf... | Not Provided | 2026-08-31 | 2026-08-31 |
| CVE-2026-75836 json | The Grav API plugin (getgrav/grav-plugin-api, bundled with Grav's admin-next/API stack) before 1.0.14 fails to enforce the au... | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-72826 json | The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of... | Not Provided | 2026-08-14 | 2026-08-24 |
| CVE-2026-72823 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope cap bypass in DemoController. Its priva... | Not Provided | 2026-08-14 | 2026-08-17 |
| CVE-2026-65007 json | The Grav api plugin (grav-plugin-api) before 1.0.8 fails to properly authorize API key generation and revocation: the plugin ... | Not Provided | 2026-07-21 | 2026-07-23 |
| CVE-2026-53821 json | OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or trus... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-52785 json | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in ti... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-48824 json | Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw (CVE-2026-4... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-45819 json | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameter... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-14540 json | A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbo... | Not Provided | 2026-07-31 | 2026-07-31 |