Search results

# [Security] Privilege/blast-radius concern: arbitrary script executed with sudo on managed hosts via server-rule authoring

Status: Open.

#460 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

# [Security] SSRF via webhook URL

Status: Open.

#459 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

# [Security] Unsafe deserialization via fastjson 1.2.47 JSONObject.parseObject in cloud-native config validation

Status: Open.

#458 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

# [Security] Unsafe deserialization via SnakeYAML new Yaml() in compliance-rule script and cloud-native config

Status: Open.

#457 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

# [Security] OS command injection via image references and repo credentials in image scan (/image/scan/image/repo, /image/scan/{id})

Status: Open.

#456 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

# [Security] OS command injection via stored cloud-account fields in resource fix/restart (/resource/fix/{id}, /resource/restart/{id})

Status: Open.

#455 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

# [Security] OS command injection via proxy fields in cloud-native config scan (/config/validate, /config/add)

Status: Open.

#454 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

# [Security] OS command injection via license upload (/license/update/license)

Status: Open.

#453 In HummerRisk/HummerRisk;

· Ku4D3 opened on Jun 25, 2026

SnakeYaml组件反序列化漏洞

Status: Open.

#452 In HummerRisk/HummerRisk;

· k1ng0fic3 opened on Dec 11, 2025

trivy漏洞库更新异常

Status: Open.

#450 In HummerRisk/HummerRisk;

· TheDecember opened on Jan 7, 2025

k8s检测异常，custodian.commands:ERROR invalid policy file: /tmp/hr-06171915-ca9cc371/all-namespcace/policy.yml error

Status: Open.

#449 In HummerRisk/HummerRisk;

· qian9596 opened on Jun 24, 2024

帮助文档看不了

Status: Open.

#448 In HummerRisk/HummerRisk;

· juneTome opened on Jun 5, 2024