GO-2025-3678 vulnerabilities

Vulnerabilities for packages: lychee, sccache, wadm, wasm-pack, wasmtime, ztunnel, zizmor, tealdeer, kdash, fnm, pixi, xh, nushell, wash, rye, buck2, linkerd-extension-init, wasmcloud, oranda, parseable, samply, shadowsocks-rust, zed, cargo-audit, atuin, rustup, zola, ntpd-rs, deno, uv,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, conftest, containerd-fips, age-fips, kube-oidc-proxy, prometheus-mysqld-exporter, rabbitmq-messaging-topology-operator-fips, agentbeat-fips, newrelic-nri-statsd, git-sync-fips, bazelisk, conftest-fips,...

GO-2024-2472 vulnerabilities

Vulnerabilities for packages: xeol...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, splunk-otel-collector, minio-operator, karma, jaeger, opentelemetry-collector, aws-otel-collector, fluent-bit-plugin-loki, opentelemetry-collector-contrib, prometheus-pushgateway, metrics-server, minio, minio-object-browser,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets, slsa-verifier,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, zarf, argocd-image-updater, pulumi-kubernetes-operator, goreleaser, gitea, gptscript, steampipe, kyverno, wolfictl, pulumi, grafana-alloy, gitsign, src-fingerprint, scorecard, pulumi-language-dotnet, apko, grype, pulumi-language-yaml, act,...

MINI-8QV8-HGG3-845J

Bulletin has no description...

CVE-2026-59548

creationtimestamp| type| source ---|---|--- 2026-08-14 03:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msz6yvxka52j...

Trust without Boundaries: An Architectural Analysis of Satellite Flight Software

As spacecraft become more software-driven and interconnected, onboard flight software is an increasingly important security boundary. Popular flight software architectures often treat onboard components as trusted peers, simplifying integration while limiting internal isolation and access control...

Finding Vulnerabilities Via LLM-Augmented Semantics-Aware Type-Checking

Vulnerability detection via static analysis traditionally relies on security experts encoding insecure coding patterns into algorithmic rules. However, this approach often focuses on syntactic patterns and overlooks deeper semantic information in the code, such as the meanings of variable and...

Uncontrolled Recursion

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Uncontrolled Recursion via the custom analysis definition. An attacker can exhaust the thread stack and terminate the affected nod...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the validation capability of the Observability log analysis feature. An...

speakeasy v2.0.0b6

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

CVE-2026-69108

creationtimestamp| type| source ---|---|--- 2026-08-13 20:25:38+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msyi2vxzpj22 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1438 2026-09-20 00:00:10+00:00| seen| https://t.me/icscert/1438...

CVE-2026-72638

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

dalfox v3.2.1

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy. Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickl...

MINI-GRJ7-P3HH-QV6R

Bulletin has no description...

MINI-2GCG-J3RF-FPWF

Bulletin has no description...

CVE-2026-72638 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

CVE-2026-72667

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...