WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting

Code for Recovery 12 Step Meeting List versions up to 3.14.33 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft a malicious URL. id:...

CVE-2026-53614

A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: step-issuer, rclone-fips, gitness, step-ca-fips, tkn, step-fips, buf, caddy, caddy-fips, cloudflared, step-issuer-fips, step-ca, dapr, step, karma, sftpgo, tkn-fips, kyverno-policy-reporter-ui, kyverno-policy-reporter-ui-fips, rclone, telegraf, gogatekeeper, dapr-fip...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: caddy, step-issuer, caddy-fips, step-ca-fips, step-issuer-fips, step-ca, step-fips, step...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: caddy, step-issuer, caddy-fips, step-ca-fips, step-issuer-fips, step-ca, step-fips, step...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: caddy, frankenphp-8.3, caddy-fips, step-ca-fips, frankenphp-8.4, step-issuer-fips, frankenphp-8.5, frankenphp-8.2...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, step-issuer, cert-manager-google-cas-issuer, cert-manager-csi-driver-fips, aws-privateca-issuer-fips, opentelemetry-operator-fips, mariadb-operator-fips, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, step-issuer-fips,...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: cert-exporter-fips, cert-exporter, cert-manager-webhook-pdns-fips, step-issuer, aws-privateca-issuer, cert-manager-istio-csr, step-issuer-fips, cert-manager-cmctl-fips, cert-manager-cmctl, aws-privateca-issuer-fips, cert-manager-webhook-pdns...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian, caddy, wavefront-collector-for-kubernetes, argo-workflows, caddy-fips, argo-workflows-fips, trillian-fips, step-ca, step, kots...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: step-issuer, spark-operator, flyte, opa-fips, step-ca-fips, nfs-subdir-external-provisioner-fips, crossplane-provider-gcp, kubeflow-pipelines, flux-image-reflector-controller-fips, kyverno, step-fips, terraform-provider-google, caddy, opa,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: kaniko, opa, conftest, step, spegel, k3d, ksops, gomplate, sops, step-ca, trivy, minio, cilium-cli, melange, zarf, hubble-ui, spire-server, k3s, smarter-device-manager, guac, kubernetes-csi-driver-hostpath, sigstore-scaffolding, dex, dbmate, grafana-agent-operator,...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step, step-issuer...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step, step-issuer...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: karma, gitness, caddy, step, step-issuer, tkn, sftpgo, rclone, kyverno-policy-reporter-ui, step-ca, buf, cloudflared, gogatekeeper...

GO-2024-3282 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, step-issuer, cert-manager-istio-csr, cert-exporter...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, cert-manager-istio-csr, opentelemetry-operator, cert-manager-csi-driver, mariadb-operator...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: caddy, step, kots, step-ca, argo-workflows, trillian...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: ferretdb, kube-bench, k3s, temporal-server, caddy, step, kine, amass, src, kots, spicedb, step-ca, argo-workflows, trillian...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, opa, step, amass, flyte, kubeflow, step-ca, opa-envoy, portieris, smarter-device-manager, flux-image-reflector-controller, sigstore-scaffolding, step-issuer, dgraph, pulumi-language-java, caddy, spark-operator, sriov-network-device-plugin,...