{"action":"Upgrade prowler-cloud to 5.30.3 or later.","affected":[{"fixed":"5.30.3","introduced":"0"}],"component":"prowler-cloud","cve_ids":["CVE-2026-100169","CVE-2026-59151"],"ecosystem":"PyPI","epss":0.00851,"exploited":false,"fixed_versions":["5.30.3"],"ghsa_id":"GHSA-h8m9-jgf8-vwvp","id":"tcs_01M5KFK77925QP9DTTE3Y43GPB","modified_at":"2026-10-15T02:55:47.735531350Z","published_at":"2026-09-11T21:38:24Z","references":["https://osv.dev/vulnerability/GHSA-h8m9-jgf8-vwvp","https://github.com/prowler-cloud/prowler/security/advisories/GHSA-h8m9-jgf8-vwvp","https://nvd.nist.gov/vuln/detail/CVE-2026-59151","https://github.com/prowler-cloud/prowler/pull/11650","https://github.com/prowler-cloud/prowler/commit/bf3b5c2ba713e533014927141b64948c82c8f32e","https://github.com/prowler-cloud/prowler/commit/f5ff30ad175bd2edf02cd28872653c1cda5867b7","https://github.com/prowler-cloud/prowler","https://github.com/prowler-cloud/prowler/releases/tag/5.30.3","https://github.com/pypa/advisory-database/tree/main/vulns/prowler-cloud/PYSEC-2026-3725.yaml"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-h8m9-jgf8-vwvp","url":"https://osv.dev/vulnerability/GHSA-h8m9-jgf8-vwvp"}],"summary":"Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover"}