Expired50% confidenceEventExact time
Recently, two vulnerabilities were simultaneously disclosed in an orchestration/container component, one of which was discovered by the Tencent security team.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
9/15/2026
First Seen
Valid until: 9/29/2026(expired)
Sources
Related Entities
Related Claims
UnverifiedThese malicious packages attempted to steal API keys through a vulnerability that was not patched until more than two months later.76% similarUnverified补天、漏洞盒子是第三方漏洞聚合平台69% similarUnverifiedThe most fatal vulnerabilities are often not vulnerabilities in underlying components (such as Nginx or the operating system), but business logic vulnerabilities embedded by developers when writing business code.68% similarUnverifiedThe container escape vulnerability CVE-2019-5736 (runc vulnerability) was discovered because all containers share the same kernel67% similarUnverifiedIn historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/923247API
curl https://kongchang.com/api/v1/knowledge/claims/923247MCP
get_claim(id=923247)