CVE-2026-72812

SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all...

CVE-2026-22555

A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...

GO-2023-1723 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2939 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2716 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2026-4465 vulnerabilities

Vulnerabilities for packages: spicedb, spicedb-fips...

GO-2023-2166 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2022-0574 vulnerabilities

Vulnerabilities for packages: opa...

GO-2023-2133 vulnerabilities

Vulnerabilities for packages: nats...

GO-2023-2163 vulnerabilities

Vulnerabilities for packages: minio, k3s, nats-server, nats...

GO-2025-3565 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GO-2024-2476 vulnerabilities

Vulnerabilities for packages: dex...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, argo-workflows-fips...

GO-2023-2166 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2597 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2716 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2023-2133 vulnerabilities

Vulnerabilities for packages: nats...

GO-2026-4423 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, fuse-overlayfs-snapshotter, kubernetes-event-exporter, tekton-chains, db-operator, crossplane-provider-aws-s3, ingress-nginx-controller, golangci-lint, cert-manager, kubescape-operator, litestream, xeol, glab, pulumi-language-java,...