3333 matches found
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: grype, kubescape, crossplane-provider-aws-rds, xeol, crossplane-provider-aws-cloudformation, crossplane-provider-aws-elasticache, pulumi, crossplane-provider-aws-s3, kyverno-notation-aws, gitaly, boring-registry, crossplane-provider-aws-cloudfront,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: terraform-fips, kubevela, cert-manager-cmctl, k9s, crossplane-provider-aws-sqs-fips, flux-source-controller, rclone-fips, trivy-fips, crossplane-provider-aws-sns-fips, flux, crossplane-provider-aws-cloudwatchlogs-fips, melange, external-secrets-operator,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: terraform-fips, kubevela, cert-manager-cmctl, k9s, crossplane-provider-aws-sqs-fips, flux-source-controller, rclone-fips, trivy-fips, crossplane-provider-aws-sns-fips, flux, crossplane-provider-aws-cloudwatchlogs-fips, melange, external-secrets-operator,...
Linux Distros Unpatched Vulnerability : CVE-2026-26284
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks prope...
CVE-2026-26284
A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. When processing Huffman-coded data from Photo CD PCD files, the image decoder contains an incorrect initialization that could lead to an out-of-bounds read. This vulnerability could...
CVE-2026-26284
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks proper boundary checking when processing Huffman-coded data from PCD Photo CD files. The decoder contains an function that has an incorrect...
CVE-2026-26284
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks proper boundary checking when processing Huffman-coded data from PCD Photo CD files. The decoder contains an function that has an incorrect...
CLEANSTART-2026-PN58989 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Multiple security vulnerabilities affect the argo-cd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...
CLEANSTART-2026-YQ79300 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Multiple security vulnerabilities affect the argo-cd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...
CLEANSTART-2026-IO04548 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Multiple security vulnerabilities affect the argo-cd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...
CVE-2026-25934 vulnerabilities
Vulnerabilities for packages: kubevela, k9s, flux-source-controller, trivy-fips, chezmoi, flux, melange, external-secrets-operator, google-osconfig-agent, grafana-alloy-fips, crossplane-fips, zarf, gitea, grype-fips, grype-db, argo-workflows, rancher-fleet-fips, zot, rancher-fleet,...
GHSA-37CX-329C-33X3 vulnerabilities
Vulnerabilities for packages: kubevela, k9s, flux-source-controller, trivy-fips, chezmoi, flux, melange, external-secrets-operator, google-osconfig-agent, grafana-alloy-fips, crossplane-fips, zarf, gitea, grype-fips, grype-db, argo-workflows, rancher-fleet-fips, zot, rancher-fleet,...
CVE-2026-25918 unity-cli Exposes Plaintext Credentials in Debug Logs (sign-package command)
unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...
Command Injection
Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Command Injection via improper...
CVE-2026-25722
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protecti...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 GNU inetutils Telnet Detector A safe, passive...
CVE-2026-25722: Improper Input Validation
Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protecti...
CVE-2025-13491: Untrusted Search Path
IBM App Connect Enterprise Certified Container CD: 11.2.0 through 11.6.0, 12.1.0 through 12.19.0 and 12.0 LTS: 12.0.0 through 12.0.19 could allow an attacker to access sensitive files or modify configurations due to an untrusted search path...