GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: argo-rollouts, trivy, oauth2-proxy, external-secrets-operator, aactl, kubernetes-dashboard-web, flux, gitlab-kas, sftpgo, cluster-autoscaler, prometheus-operator, net-kourier, argo-cd, syft, snyk-cli, trillian, cis-operator, secrets-store-csi-driver-provider-aws,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: trivy, external-secrets-operator, kubernetes-dashboard-web, net-kourier, timescaledb-parallel-copy, snyk-cli, cis-operator, sftpgo-plugin-auth, kafka-proxy, grpc-health-probe, influx, yunikorn-k8shim, spark-operator, kubernetes-ingress-defaultbackend, pgtimetable,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: prometheus, openbao, kubernetes-csi-livenessprobe, blob-csi-fips, helm-mapkubeapis, kubernetes-dashboard-auth-fips, kubernetes-csi-driver-hostpath, argocd-image-updater-fips, databricks-cli, eks-node-monitoring-agent-fips, cilium-envoy-fips, plugin-barman-cloud,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: podman, prometheus, kubevirt-cdi-operator, openbao, nats-top, kubernetes-csi-livenessprobe, addon-resizer-fips, blob-csi-fips, helm-mapkubeapis, kubernetes-dashboard-auth-fips, manifest-tool, prometheus-beat-exporter, argocd-image-updater-fips, databricks-cli,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: prometheus, openbao, kubernetes-csi-livenessprobe, addon-resizer-fips, blob-csi-fips, custom-pod-autoscaler-operator-fips, conjur-cli, nri-haproxy-fips, plugin-barman-cloud, envconsul, crossplane-provider-aws-kinesis-fips, cert-manager-csi-driver-fips,...

CVE-2026-5501 Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates

wolfSSLX509verifycert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints CA:FALSE that is legitimately signed by a trusted root. An attacker who obtains any leaf...

CVE-2026-21919

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410...

CVE-2025-13914

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410 2026-04-09 23:29:35+00:00| seen| Telegram/Kq2o4LPf2BGuBLl8KciQDld7X5AUdxQvsJMa5JmTWnsS0Y 2026-04-10 01:55:59+00:00| seen|...

CVE-2026-33771

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410 2026-04-09 23:29:35+00:00| seen| Telegram/Kq2o4LPf2BGuBLl8KciQDld7X5AUdxQvsJMa5JmTWnsS0Y 2026-04-10 01:21:54+00:00| seen|...

CVE-2026-33791

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410...

CVE-2025-59969

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410...

CLEANSTART-2026-MI26424 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the cert-manager package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

CLEANSTART-2026-BY59711 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-5841

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5841 2026-04-09 07:17:08+00:00| published-proof-of-concept| Telegram/PMg85ruQxGJV3fewnx4iF85fyDu3eKOw9onWzzjaoGbfReM...

CVE-2026-5838

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5838...

CVE-2026-5878

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-14...

CVE-2026-5901

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-14...

CVE-2026-5888

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-14...

CVE-2026-5900

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-14...

CVE-2026-5861

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-13...