CVE-2026-71326

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

CVE-2026-71327

CVE-2026-71327 - Traefik Gateway API route identity collision . Affected: Traefik’s Kubernetes Gateway API provider (HTTPRoute, GRPCRoute, TCPRoute, TLSRoute) from 3.0.0 to 3.6.25 and 3.7.10. Root cause: identities are built by hyphen-concatenating namespace, route name, Gateway identity, entry p...

CVE-2026-71327 Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and...

CVE-2026-71327 Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and...

CVE-2026-71326 Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

CLEANSTART-2026-EK75112 Security fixes in argo-workflows 3.7.10-r4

Package argo-workflows version 3.7.10-r4 fixes 2 vulnerabilities: ghsa-p436-gjf2-799p, CVE-2025-15558...

CLEANSTART-2026-PN54364 Security fixes in argo-workflows-fips 3.7.10-r0

Package argo-workflows-fips version 3.7.10-r0 fixes 2 vulnerabilities: ghsa-fw7p-63qq-7hpr, CVE-2026-26958...

CLEANSTART-2026-GX20601 Security fixes in argo-workflows 3.7.10-r2

Package argo-workflows version 3.7.10-r2 fixes 3 vulnerabilities: ghsa-9h8m-3fm2-qjrq, CVE-2026-24051, CVE-2026-27141...

CLEANSTART-2026-EC14979 Security fixes in argo-workflows 3.7.10-r0

Package argo-workflows version 3.7.10-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-QJ99609 Security fixes in argo-workflows 3.7.10-r3

Package argo-workflows version 3.7.10-r3 fixes 2 vulnerabilities: ghsa-fw7p-63qq-7hpr, CVE-2026-26958...

CVE-2024-34947

Quanxun Huiju Network Technology Beijing Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack...

EUVD-2024-1366

Malicious code in bioql PyPI...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload due to improper validation of file extensions. An attacker can bypass SVG file sanitization protections by initially uploading a file with a permitted extension and subsequently renaming it to an .svg extension...

GHSA-2QJP-FG8C-G878 vxe-table Cross-site Scripting vulnerability

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

CVE-2023-1001 xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

CVE-2023-1001

The CVE-2023-1001 entry concerns xuliangzhan vxe-table (up to 3.7.9) where the textarea.js export function inputValue is vulnerable to cross-site scripting. The vulnerability is exploitable remotely and is caused by improper handling of inputValue in the vxe-textarea component. Upgrade to version...

PT-2024-11932

Name of the Vulnerable Software and Affected Versions xuliangzhan vxe-table versions up to 3.7.9 Description A problematic issue has been found in the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to...

PT-2024-26263 · Quanxun Huiju Network Technology · Ik-Q3000

Name of the Vulnerable Software and Affected Versions: Quanxun Huiju Network Technology Beijing Co.,Ltd IK-Q3000 version 3.7.10 Description: The issue concerns an ICMP redirect attack. There is no information provided about the estimated number of potentially affected devices worldwide or details...

Quanxun Huiju Network Technology IK-Q3000 安全漏洞

Quanxun Huiju Network Technology IK-Q3000 is a router from Quanxun Huiju Network Technology China. A security vulnerability exists in Quanxun Huiju Network Technology IK-Q3000 version 3.7.10 x64 Build202401261655, which originates from a vulnerability that allows an attacker to cause a denial of...

PT-2024-26264 · Quanxun Huiju Network Technology · Ik-Q3000

Name of the Vulnerable Software and Affected Versions: Quanxun Huiju Network TechnologyBeijing Co.,Ltd IK-Q3000 version 3.7.10 Description: The issue allows attackers to cause a Denial of Service DoS when attempting to make TCP connections. Recommendations: For Quanxun Huiju Network...