GO-2026-4408 vulnerabilities

Vulnerabilities for packages: wolfictl, cg...

GO-2026-4407 vulnerabilities

Vulnerabilities for packages: wolfictl, cg...

GO-2026-4412 vulnerabilities

Vulnerabilities for packages: wolfictl, cg...

GO-2025-3701 vulnerabilities

Vulnerabilities for packages: zot, melange, k3s, cg, wolfictl...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw, chainctl, cg...

GO-2025-3815 vulnerabilities

Vulnerabilities for packages: cg...

GO-2026-4409 vulnerabilities

Vulnerabilities for packages: wolfictl, cg...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: k9s, grype, kubescape, undock, chainctl, cg, gitleaks, grype-db, zarf, k9s-fips, wolfictl, gptscript, trufflehog-fips, kots, gotenberg, mattermost, mattermost-fips, filebrowser, trufflehog, grype-fips, chezmoi, syft, syft-fips, nuclei...

GO-2025-4160 vulnerabilities

Vulnerabilities for packages: k9s, zarf, chainctl, cg...

GO-2026-5212 vulnerabilities

Vulnerabilities for packages: cg...

GO-2026-5233 vulnerabilities

Vulnerabilities for packages: cg...

GO-2026-4588 vulnerabilities

Vulnerabilities for packages: apply-cve-bump, dl, wolfictl, cg...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent, chainctl, cg...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent, chainctl, cg...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: buildah, ko-fips, skopeo, splunk-otel-collector, nerdctl-fips, openfga-fips, rancher, zot, beats, opentelemetry-operator-fips, zarf, spire-server-fips, consul-k8s-fips, docker, opentelemetry-collector-contrib, envoy-gateway-fips, gatekeeper,...

CVE-2026-16055 Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login

The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentication cookie directly after the password check, which bypasses installed brute-force-protection and two-factor-authentication Contest Galle...

CVE-2026-29049 vulnerabilities

Vulnerabilities for packages: apply-cve-bump, dl, wolfictl, cg...

GHSA-7RP8-R62P-Q6WC vulnerabilities

Vulnerabilities for packages: apply-cve-bump, dl, wolfictl, cg...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: buildah, kube-arangodb-fips, mods, crossplane-provider-aws-datasync-fips, crossplane-provider-azure-authorization, apko-fips, crossplane-provider-aws-appflow-fips, helm, steampipe, juicefs, crossplane-provider-azure-servicebus, sealed-secrets-fips,...

CVE-2026-57876

An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a...