CRE-2025-0031
Django applications may return a \"DisallowedHost\" error when receiving requests with an unrecognized or missing Host header. This typically occurs in production environments where reverse proxies, load balancers, or external clients send requests using an unexpected domain or IP address. Django blocks these requests unless the domain is explicitly listed in `ALLOWED_HOSTS`.
CRE-2025-0043
Grafana may reject custom or third\-party plugins at runtime if they are not digitally signed. When plugin signature validation is enabled (default since Grafana 8+), unsigned plugins are blocked and logged as validation errors during startup or plugin loading.
CRE-2025-0044
Detects NGINX configuration files that advertise obsolete and cryptographically weak ciphers (RC4\-MD5, RC4\-SHA, DES\-CBC3\-SHA).
CRE-2025-0045
The NATS server has emitted an **Authorization Violation** log entry, meaning a client attempted to connect, publish, subscribe, or perform another operation for which it lacks permission. Intermittent violations often point to misconfiguration or start\-up chaos. However, sustained or widespread violations can signal credential expiry or missing secrets.
CRE-2025-0046
The NATS server has emitted an **Permission Violation** log entry, meaning
CRE-2025-0072
Detects a cascade of critical Redis failure modes in a single session\: