Skip to content
OpenAdvisories

Archive

2 May 2026

Vulnerabilities first published on this day (UTC), newest first.

82 results · Feed

  • High 7.7

    In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

  • Medium 6.3

    ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection

    A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. Executing a manipulation can lead to os command injection. The attack can be execu…