Skip to main content

6 docs tagged with "security"

View all tags

CRE-2025-0031

Django applications may return a \"DisallowedHost\" error when receiving requests with an unrecognized or missing Host header. This typically occurs in production environments where reverse proxies, load balancers, or external clients send requests using an unexpected domain or IP address. Django blocks these requests unless the domain is explicitly listed in `ALLOWED_HOSTS`.

CRE-2025-0043

Grafana may reject custom or third\-party plugins at runtime if they are not digitally signed. When plugin signature validation is enabled (default since Grafana 8+), unsigned plugins are blocked and logged as validation errors during startup or plugin loading.

CRE-2025-0044

Detects NGINX configuration files that advertise obsolete and cryptographically weak ciphers (RC4\-MD5, RC4\-SHA, DES\-CBC3\-SHA).

CRE-2025-0045

The NATS server has emitted an **Authorization Violation** log entry, meaning a client attempted to connect, publish, subscribe, or perform another operation for which it lacks permission. Intermittent violations often point to misconfiguration or start\-up chaos. However, sustained or widespread violations can signal credential expiry or missing secrets.

CRE-2025-0046

The NATS server has emitted an **Permission Violation** log entry, meaning

CRE-2025-0072

Detects a cascade of critical Redis failure modes in a single session\: