GO-2025-3564 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, node-feature-discovery, sriov-network-device-plugin, nvidia-container-toolkit-fips, gpu-operator-fips, prometheus-podman-exporter, gpu-operator, podman, cadvisor, buildah-fips, buildah, podman-fips, nvidia-container-toolkit,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: octo-sts, thanos-operator, kratos, wazero-fips, newrelic-k8s-metadata-injection-fips, conftest-fips, nova-fips, nri-redis-fips, docker-cli, openbao-k8s-fips, syft, yunikorn-k8shim-fips, redka, harbor-fips, k8s-driver-manager-fips, otel-cli, php-fpmexporter,...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: melange, pombump...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: tfsec, snyk-cli, wolfictl, zarf, terraform, zot, trivy, tflint, terragrunt, kots, kubescape, k9s, conftest, grype...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: fq, docker-credential-gcr, trillian, kubernetes-dns-node-cache, gomplate, nri-nagios, wireguard-go, chartmuseum, temporal-server, haproxy-ingress, skaffold, temporal-ui-server, ferretdb, argo-workflows, capslock, wazero, petname, nri-cassandra, govulncheck, flux,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, snyk-cli, gomplate, crossplane-provider-azure-authorization, kots, argo-workflows, atlantis, crossplane-provider-aws-sqs, trufflehog, argo-events, gptscript, pulumi-language-dotnet, neuvector-sigstore-interface, vexctl, guac, terragrunt,...

GHSA-3HVR-PHFH-X26G vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure...

EUVD-2007-4355

Malware in sbrugna...

EUVD-2007-3825

Malware in sbrugna...

EUVD-2007-6001

Malware in sbrugna...

EUVD-2007-5107

Malware in sbrugna...

EUVD-2010-0303

Malware in sbrugna...

EUVD-2007-3621

Malware in sbrugna...

EUVD-2007-5999

Malware in sbrugna...

EUVD-2024-22309

Malicious code in bioql PyPI...

CVE-2024-6107

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps...

CVE-2025-1709

creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885 2025-07-03 06:23:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2...

I added support for ALT Linux OVAL content in Linux Patch Wednesday

I added support forALT Linux OVAL contentin Linux Patch Wednesday. Now I track when specific CVEs were fixed in ALT Linux packages and take that into account when generating the monthly bulletins. The more data sources on patched vulnerabilities in Linux distributions are used, the more accurate...