{"action":"Upgrade prowler-cloud to 5.30.3 or later.","affected":[{"fixed":"5.30.3","introduced":"0"}],"component":"prowler-cloud","cve_ids":["CVE-2026-100169","CVE-2026-59151"],"ecosystem":"PyPI","epss":0.00851,"exploited":false,"fixed_versions":["5.30.3"],"ghsa_id":"GHSA-h8m9-jgf8-vwvp","id":"tcs_01M5KH6ZR21CFB1TB04GC0C1NW","modified_at":"2026-10-15T02:55:47.735531350Z","published_at":"2026-07-10T19:17:26.780Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3725","https://github.com/prowler-cloud/prowler/releases/tag/5.30.3","https://github.com/prowler-cloud/prowler/pull/11650","https://github.com/prowler-cloud/prowler/commit/bf3b5c2ba713e533014927141b64948c82c8f32e","https://github.com/prowler-cloud/prowler/commit/f5ff30ad175bd2edf02cd28872653c1cda5867b7","https://github.com/prowler-cloud/prowler/security/advisories/GHSA-h8m9-jgf8-vwvp"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"PYSEC-2026-3725","url":"https://osv.dev/vulnerability/PYSEC-2026-3725"}],"summary":"Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token,"}