GO-2026-6061 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, cluster-api-gcp-controller, rancher-system-agent, kubernetes-csi-external-snapshotter, external-secrets-operator, rabbitmq-cluster-operator, flux-image-automation-controller, osv-scanner, crossplane-provider-azure-storage,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: syft, argocd-image-updater, docker-compose, witness, slsa-verifier, k9s, dagger, external-secrets-operator, pulumi-language-java, tkn, docker, glab, tw, flux-image-automation-controller, nuclei, crossplane-provider-family-aws, osv-scanner, argo-cd,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: docker-cli, secrets-store-csi-driver-provider-gcp, ghaudit, victoriametrics-cluster, git-lfs, glab, rabbitmq-cluster-operator, flux-image-automation-controller, osv-scanner, crossplane-provider-azure-storage, terraform-provider-google, ollama, flux,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kargo, spire-server, actions-runner-controller, argo-events, falcoctl, flux-helm-controller, grafana-mimir, opentelemetry-collector-contrib, vexctl, terragrunt, crossplane-provider-azure-authorization, buildkitd, crossplane-provider-azure-managedidentity, zot,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: docker-cli, secrets-store-csi-driver-provider-gcp, ghaudit, git-lfs, glab, rabbitmq-cluster-operator, flux-image-automation-controller, osv-scanner, crossplane-provider-azure-storage, terraform-provider-google, ollama, flux, secrets-store-csi-driver-provider-aws,...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104

CVE-2026-57104 is a cross-site scripting (XSS) flaw in Azure Storage Explorer where improper input neutralization during web page generation enables an unauthenticated remote attacker to elevate privileges over a network. Microsoft's MSRC update guide lists a fix; CISA's SSVC assessment shows no ...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56590

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

Azure Storage Explorer Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

PT-2026-70394

Name of the Vulnerable Software and Affected Versions Azure Storage Explorer affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allo...

SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...

Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. CVE-2026-56852:...

SUSE-SU-2026:3528-1 Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. - CVE-2026-56852:...

azure-storage-azcopy-10.32.6-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11444-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...

OPENSUSE-SU-2026:11444-1 azure-storage-azcopy-10.32.6-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.6-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-61448 Parse Server 9.0.0 Stored XSS via malformed Content-Type

Parse Server is affected by a stored cross-site scripting XSS vulnerability in versions = 9.0.0, 9.10.0-alpha.2 and = 8.6.83. When an uploaded file's extension is not recognized by the mime package, Parse Server preserves the client-supplied Content-Type. A malformed Content-Type that is not a...