Kia America is headquartered in Irvine, California and is a subsidiary of Kia Corporation. Kia’s technology-rich product lineup of cars, SUVs, and alternative-powered vehicles are backed by the industry-leading Kia 10-year/100,000-mile limited warranty program.
Delphi Product & Service Solutions is Delphi’s aftermarket channel. In the aftermarket, our technologies cover every aspect of today’s vehicles, from brakes to steering, air conditioning to ignition, engine management to fuel systems — whether the vehicle is a hybrid, or powered by gasoline or diesel. And to support those products, we provide the comprehensive diagnostics, test equipment and robust training to help service and repair the advanced vehicle technologies of today and tomorrow. Connect to innovation at www.delphiautoparts.com.
Security & Compliance Standards Overview
No incidents recorded for Kia America in 2025.
No incidents recorded for Delphi Auto Parts in 2025.
Kia America cyber incidents detection timeline including parent company and subsidiaries
Delphi Auto Parts cyber incidents detection timeline including parent company and subsidiaries
NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).
