8004 matches found
GO-2026-5017 vulnerabilities
Vulnerabilities for packages: telegraf, pulumi, docker, gptscript, prometheus-operator, external-dns, wolfictl, gomplate, trivy-operator, mattermost, kaf, kubernetes, kubescape, kots, opentelemetry-collector, gh, cilium-cli, istio, syft, docker-cli-buildx, chisel, knative-serving, gatus,...
GO-2026-4946 vulnerabilities
Vulnerabilities for packages: telegraf, boring-registry, grafana-rollout-operator, pulumi, k8ssandra-client, go-licenses, cert-exporter, mattermost, manifest-tool, bazelisk, whereabouts, k8sgpt-operator, metacontroller, neuvector-dbgen, nri-prometheus, vt-cli, redis-operator, grafana-mimir,...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: teleport, ratify, cosign, neuvector-sigstore-interface, kyverno-notation-aws, goreleaser, kyverno, witness, zarf, ko, kubescape, policy-controller, zot, falcoctl, tflint, gh, tekton-chains, crossplane, sigstore-scaffolding, spire-server, flux-source-controller, vexct...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: telegraf, boring-registry, grafana-rollout-operator, cri-tools, terraform-docs, frp, ratify, stakater-reloader, bento, crossplane-provider-aws-cloudformation, ferretdb, volume-modifier-for-k8s, container-object-storage-interface, http-echo, gptscript, minio-operator,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: teleport, docker, ratify, cosign, neuvector-sigstore-interface, kyverno-notation-aws, goreleaser, slsa-verifier, trivy-operator, kyverno, witness, zarf, ko, kubescape, policy-controller, zot, falcoctl, tflint, gh, tekton-chains, crossplane, sigstore-scaffolding,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: grafana-rollout-operator, tempo, ratify, gptscript, prometheus-operator, kubernetes-csi-driver-hostpath, bom, harbor-cli, opa, wait-for-port, rancher-system-upgrade-controller, render-template, step-kms-plugin, rclone, kubernetes-dashboard-web, tflint, kind,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: kubernetes-event-exporter, pulumi, kubevela, fulcio, cosign, crossplane-provider-azure-managedidentity, k3s, terraform, bank-vaults, neuvector-sigstore-interface, argo-events, sops, gomplate, crossplane-provider-azure-authorization, goreleaser, slsa-verifier, rekor,...
EUVD-2026-58481
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...
CVE-2026-73479
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...
CVE-2026-73479
CVE-2026-73479 affects dua-cli. When printing marked file paths after exiting the TUI, it fails to filter OSC/CSI terminal escape sequences, allowing crafted file names to cause escape-sequence interpretation by the terminal emulator. Potential impacts include title spoofing and clipboard manipul...
CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...
CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...
PT-2026-71877
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...
CVE-2026-19502
MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...
CVE-2026-19502
MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...
EUVD-2026-57549
MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...
CVE-2026-19502 Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI
MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...
CVE-2026-26035
An Improper Authentication vulnerability CWE-287 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb...
EUVD-2026-57193
An Improper Authentication vulnerability CWE-287 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb...
Improper Neutralization Of Argument Delimiters (Argument Injection)
Apache Camel is vulnerable to Improper Neutralization of Argument Delimiters. The vulnerability is due to insufficient validation of custom CLI arguments and path values supplied through Camel headers, which allows an attacker who can influence these values to inject unintended docling command-li...