GO-2022-0574 vulnerabilities

Vulnerabilities for packages: opa...

GO-2023-2133 vulnerabilities

Vulnerabilities for packages: nats...

GO-2025-3565 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GO-2023-2163 vulnerabilities

Vulnerabilities for packages: nats-server, nats, minio, k3s...

GO-2024-2476 vulnerabilities

Vulnerabilities for packages: dex...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, argo-workflows-fips...

GO-2024-2716 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2024-2597 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2023-2166 vulnerabilities

Vulnerabilities for packages: spicedb...

GO-2023-2133 vulnerabilities

Vulnerabilities for packages: nats...

GO-2026-4423 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, buildah, dask-gateway, haproxy-ingress, rook, cert-exporter, ksops, cis-operator, flux, mountpoint-s3-csi-driver, pulumi-language-java, tetragon, argocd-image-updater, cri-tools, crossplane-provider-aws-firehose, crossplane-provider-aws-sns,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildah, pulumi, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, ko, kots, rootlesskit, falcoctl, skaffold, src, rancher, pulumi-language-dotnet, crossplane-provider-aws-elasticache,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kargo, pulumi, crossplane-provider-azure, rook, tekton-chains, opentelemetry-collector-contrib, policy-controller, ksops, flux, grafana-mimir, gh, opentelemetry-collector, terragrunt, guac, k3s, rabbitmq-messaging-topology-operator, src-fingerprint, falcoctl,...

WordPress WP Photo Album Plus plugin < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability

Subscriber+ Cross-Album File Upload via Missing Authorization vulnerability discovered by Farid Narimanov in WordPress Plugin WP Photo Album Plus versions 9.2.09.002...

SUSE-SU-2026:23157-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...

CVE-2026-16739

The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.2 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attackers to mark arbitrary orders as confirmed and, in a...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

CVE-2026-19784

A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...