61540 matches found
PT-2026-105241
Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...
PT-2026-105222
Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of an erroneous operator, which allows attackers to cause service failures.
The vulnerability of the Perl-DBI interface for connecting to and working with databases is related to the use of an erroneous operator. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CLEANSTART-2026-LY26617 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection
Security vulnerability affects the helm-operator package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection...
CLEANSTART-2026-YE46626 Previously, a channel registered in the mux's chanList is not usable until it is established
Security vulnerability affects the helm-operator package. Previously, a channel registered in the mux's chanList is not usable until it is established...
CLEANSTART-2026-FI79899 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion
Security vulnerability affects the fluent-operator package. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
CLEANSTART-2026-JD49945 Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS
Security vulnerability affects the fluent-operator package. Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...
CLEANSTART-2026-QY50458 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
Security vulnerability affects the fluent-operator package. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface...
CLEANSTART-2026-BL26881 Previously, resolving relative paths containing parent directory ('
Security vulnerability affects the fluent-operator package. Previously, resolving relative paths containing parent directory '...
CLEANSTART-2026-BO10826 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Security vulnerability affects the fluent-operator package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label...
CLEANSTART-2026-JR87567 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not
Security vulnerability affects the fluent-operator package. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not...
CLEANSTART-2026-HW83607 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Security vulnerability affects the fluent-operator package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CLEANSTART-2026-RJ45825 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Security vulnerability affects the fluent-operator package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
PT-2026-105249
Security vulnerability affects the fluent-operator package. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface...
PT-2026-105226
Security vulnerability affects the fluent-operator package. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
PT-2026-105250
Security vulnerability affects the fluent-operator package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
PT-2026-105232
Security vulnerability affects the fluent-operator package. Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...
PT-2026-105235
Security vulnerability affects the fluent-operator package. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not...
PT-2026-105231
Security vulnerability affects the fluent-operator package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...