GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: telegraf, caddy-fips, kyverno-policy-reporter-ui-fips, step, gitness, tkn-fips, rclone-fips, dapr, sftpgo, step-ca-fips, gogatekeeper, step-ca, dapr-fips, buf, caddy, step-issuer, step-issuer-fips, kyverno-policy-reporter-ui, karma, step-fips, cloudflared, tkn, rclon...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: telegraf, caddy-fips, kyverno-policy-reporter-ui-fips, step, gitness, tkn-fips, rclone-fips, dapr, sftpgo, step-ca-fips, gogatekeeper, step-ca, dapr-fips, buf, caddy, step-issuer, step-issuer-fips, kyverno-policy-reporter-ui, karma, step-fips, cloudflared, tkn, rclon...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: caddy, tkn, sftpgo, rclone, step-ca, cloudflared, kyverno-policy-reporter-ui, gogatekeeper, gitness, step, step-issuer, buf, karma...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: caddy, tkn, sftpgo, rclone, step-ca, cloudflared, kyverno-policy-reporter-ui, gogatekeeper, gitness, step, step-issuer, buf, karma...

CVE-2026-16000: Missing Cryptographic Step

Missing cryptographic step in the DSTU 7624 CCM mode implementation KCcmBlockCipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can observe encrypted messages of known or chosen content to forge ciphertexts with valid authentication tags, via messages encrypt...

Rocky Linux 8 [CIQ] Security Update: linuxptp / linuxptp-debuginfo / linuxptp-debugsource (crlsa-2021_4321)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214321 advisory. linuxptp: wrong length of one-step follow-up in transparent clock CVE-2021-3571 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_38511)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202638511 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vim:...

Rocky Linux 10.2 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-data / vim-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_38509)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202638509 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vi...

CentOS Linux 7 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (CENTOS7:CLSA-2026:1783591320)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783591320 advisory. - Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI...

CLEANSTART-2026-VU46471 Security fix for ghsa-9g5q-2w5x-hmxf applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SZ57384 Security fix for ghsa-3fxj-6jh8-hvhx applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UC45945 Security fix for ghsa-rjr7-jggh-pgcp applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NL66537 Open Redirect vulnerability in the go-chi/chi >=5

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

CLEANSTART-2026-ZK17836 Slack Nebula before 1

Security vulnerability affects the step-ca package. Slack Nebula before 1...

CLEANSTART-2026-FB73701 Nebula is a scalable overlay networking tool

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

CVE-2026-76805 Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

vim: Vim: Arbitrary code execution via crafted step-definition patterns

A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...

CVE-2026-15664

Quill Forms (Conversational Multi Step Forms, Surveys & Quizzes) for WordPress is affected by a stored cross-site scripting vulnerability in all versions up to and including 5.7.1 . The flaw stems from insufficient input sanitization and output escaping in the Multiple Choice "Other" field . An u...

CVE-2026-15664: Improper Neutralization of Input During Web Page Generation

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple Choice 'Other' Value in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible f...

PT-2026-95780

Name of the Vulnerable Software and Affected Versions Quill Forms | Conversational Multi Step Forms, Surveys & quizzes versions prior to 5.7.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique...