GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, terraform-provider-tls, knative-serving, syft, tw, buildah, openbao, fscrypt, grype, kubescape, crossplane-provider-aws-dynamodb, cloudflared, gitlab-runner, cosign, kots, crossplane-provider-aws-elasticache, external-dns,...

GO-2026-5006 vulnerabilities

Vulnerabilities for packages: knative-serving, docker-machine-driver-harvester, syft, buildah, openbao, fscrypt, grype, kubescape, kots, external-dns, spire-server, argocd-image-updater, nerdctl, aactl, pulumi, flux-image-automation-controller, nfpm, flux, caddy, gptscript, terragrunt,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: knative-serving, docker-machine-driver-harvester, syft, fscrypt, grype, kubescape, gitlab-runner, kots, wal-g, external-dns, spire-server, argocd-image-updater, rancher-machine, splunk-otel-collector, nerdctl, aactl, pulumi, flux-image-automation-controller, nfpm,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: knative-serving, rancher-fleet, buildah, fscrypt, esbuild, runc, etcd, kubescape-operator, kots, cluster-proportional-autoscaler, bento, terraform-docs, vt-cli, wuzz, rancher-machine, argo-workflows, pdfcpu, aws-node-termination-handler, aactl, pulumi, flux,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: crossplane, gh, tekton-chains, witness, kubescape, ratify, policy-controller, cosign, kyverno-notation-aws, spire-server, teleport, ko, zot, kyverno, aactl, goreleaser, neuvector-sigstore-interface, zarf, tflint, flux-source-controller, gitsign, falcoctl, vexctl, tkn...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spark-operator, git-sync, cloud-provider-vsphere, esbuild, calico, thanos-operator, kubernetes-replicator, ratify, crossplane-provider-aws-dynamodb, vault-secrets-webhook, runc, kubescape-operator, hubble-ui, gitlab-runner, cosign, kube-vip-cloud-provider,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: crossplane, gh, tekton-chains, witness, kubescape, ratify, policy-controller, cosign, buildkitd, kyverno-notation-aws, spire-server, teleport, ko, zot, trivy, kyverno, aactl, docker, goreleaser, neuvector-sigstore-interface, zarf, tflint, flux-source-controller,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: spark-operator, docker-machine-driver-harvester, fzf, cloud-provider-vsphere, thanos-operator, ratify, docker-cli, envconsul, clickhouse-operator, kyverno-notation-aws, wal-g, k3d, rancher-system-upgrade-controller, aws-privateca-issuer, oauth2-proxy, kapp-controller...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: bank-vaults, crossplane-provider-azure, gh, kubernetes-event-exporter, terraform-provider-azurerm, crossplane-provider-azure-authorization, tekton-chains, timestamp-authority, crossplane-provider-azure-managedidentity, scorecard, grafana-mimir, sops, gomplate,...

EUVD-2026-58481

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

Zyxel USG FLEX 50(W) / USG20(W)-VPN 4.16 < 5.43 / ATP 4.32 < 5.43 / USG FLEX 4.50 < 5.43 Path Traversal

The firmware version of the Zyxel ZLD firewall device is affected by a path traversal vulnerability. A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from...

GHSA-MXCG-P696-RM94

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

CVE-2026-73479

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479

CVE-2026-73479 affects dua-cli. When printing marked file paths after exiting the TUI, it fails to filter OSC/CSI terminal escape sequences, allowing crafted file names to cause escape-sequence interpretation by the terminal emulator. Potential impacts include title spoofing and clipboard manipul...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

PT-2026-71877

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-19502

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...

EUVD-2026-57549

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...

CVE-2026-19502

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...