https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:29:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280413 EUVD-2026-280413 https://cve.radiocsirt.org/vuln/euvd-2026-280413 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34612 <p>Kestra is an open-source, event-driven orchestration platform. Prior to version 1.3.7, Kestra (default docker-compose deployment) contains a SQL Injection vulnerability that leads to Remote Code Execution (RCE) in the following endpoint &#34;GET /api/v1/main/flows/search&#34;. Once a user is authenticated, simply visiting a crafted link is enough to trigger the vulnerability. The injected payload is executed by PostgreSQL using COPY ... TO PROGRAM ..., which in turn runs arbitrary OS commands on the host. This issue has been patched in version 1.3.7.</p> <p>Kestra is an open-source, event-driven orchestration platform. Prior to version 1.3.7, Kestra (default docker-compose deployment) contains a SQL Injection vulnerability that leads to Remote Code Execution (RCE) in the following endpoint &#34;GET /api/v1/main/flows/search&#34;. Once a user is authenticated, simply visiting a crafted link is enough to trigger the vulnerability. The injected payload is executed by PostgreSQL using COPY ... TO PROGRAM ..., which in turn runs arbitrary OS commands on the host. This issue has been patched in version 1.3.7.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34612