GO-2026-4753 vulnerabilities

Vulnerabilities for packages: teleport, gotrue, zitadel, mattermost, neuvector-fips, omni-fips, mattermost-fips, omni, teleport-operator-fips, commercial-grafana, neuvector, dex, rancher, gotrue-fips, dex-fips, rancher-agent...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: authentik, vault, vault-fips, cloudbeat-fips, cloudbeat, rancher, authentik-fips, rancher-agent, azure-service-operator-fips, azure-service-operator...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, kyverno, packer-fips, nemo, chezmoi, pulumi-language-yaml, tfsec, zarf, apko, flux-image-automation-controller-fips, pulumi-kubernetes-operator, crossplane, grafana-alloy, grype, nuclei, osv-scanner, flux-source-controller-fips, tekton-pipelines,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, gitlab-rails-ce, kyverno, packer-fips, external-secrets-operator-fips, teleport, rclone, gitlab-rails-ce-fips, seaweedfs-rocksdb, telegraf, skaffold-fips, seaweedfs-rocksdb-fips, grafana, upwind-agent, kyverno-fips, gitaly, argo-cd-fips, flux,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, zitadel, kubescape-server-fips, longhorn-cli, crossplane-provider-aws-rds, packer-fips, pgpool2exporter, thanos-fips, etcd-fips, hubble-fips, kubernetes-csi-external-provisioner, kube-mgmt,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, grafana-alloy-fips, kubescape-server-fips, packer-fips, external-secrets-operator-fips, tfsec, apko, pulumi-kubernetes-operator, grype, melange, kots, kyverno-fips, crossplane-fips, gptscript, coder, grype-fips, mapotf-fips, jfrog-cli, argo-cd-fip...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, zitadel, longhorn-cli, packer-fips, crossplane-provider-aws-rds, pgpool2exporter, temporal-ui-server, thanos-fips, kubernetes-csi-external-provisioner, tfsec, kubeflow-katib, longhorn-manager, protoc-gen-go,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, packer-fips, temporal-ui-server, thanos-fips, etcd-fips, hubble-fips, tfsec, kubeflow-katib, direnv, prometheus-operator-fips, ini-file, wgcf, vertical-pod-autoscaler, kapp-controller-fips, neuvector-fips, nsc, temporal-fips,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, vertical-pod-autoscaler-fips, yam, crossplane-provider-aws-rds, temporal-ui-server, thanos-fips, etcd-fips, hubble-fips, kubernetes-csi-external-provisioner, tfsec, kubeflow-katib, direnv, protoc-gen-go, wgcf, vertical-pod-autoscaler, fzf...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: policy-controller, tkn-fips, vexctl, zarf, apko, ko, aactl, slsa-verifier, spire-server-fips, tekton-chains-fips, neuvector-sigstore-interface, melange, zot, ko-fips, flux-source-controller, skaffold, tekton-chains, tkn, spire-server, gitsign, falcoctl-fips, kubescap...

GO-2025-3841 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2025-3416 vulnerabilities

Vulnerabilities for packages: hubble, hubble-ui...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3605 vulnerabilities

Vulnerabilities for packages: kots, filebrowser...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: kubewatch, mongo-tools, pvc-autoresizer, sbom-convert, dockerize, age, speedtest-go, kuberay-operator, descheduler, redis-operator, fq, hivemind, wireguard-go, src, nri-consul, splunk-otel-collector, karma, sftpgo-plugin-auth, pgpool2exporter, fluent-bit-plugin-loki,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: trufflehog, dagger, flux-image-automation-controller, xeol, gitsign, tfsec, goreleaser, cerbos, pulumi-language-yaml, grype, skaffold, src-fingerprint, kubevela, trivy, external-secrets-operator, osv-scanner, gitaly, apko, nuclei, steampipe, kyverno,...

MINI-MR2J-V2PG-JFMC

Bulletin has no description...

CVE-2026-1621: Authentication Bypass by Primary Weakness

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

Trust without Boundaries: An Architectural Analysis of Satellite Flight Software

As spacecraft become more software-driven and interconnected, onboard flight software is an increasingly important security boundary. Popular flight software architectures often treat onboard components as trusted peers, simplifying integration while limiting internal isolation and access control...

CVE-2026-56860

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...