GO-2024-2609 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, vault-k8s, spark-operator, terraform-docs, cadvisor, goreleaser, pulumi-kubernetes-operator, local-path-provisioner, wait-for-port, nfs-subdir-external-provisioner, rabbitmq-cluster-operator, slsa-verifier, nri-nginx, vite,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, argocd-image-updater, pulumi-kubernetes-operator, crossplane-provider-aws-rds, goreleaser, crossplane-provider-aws-eks, grafana-alloy, atlantis, sops, argo-events, crossplane-provider-aws, buildkitd, crossplane-provider-aws-sqs,...

GHSA-7JMF-5VCP-F672

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

GHSA-3HVR-PHFH-X26G vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp...

CGA-289V-X546-HH5J

Bulletin has no description...

Redis: undisclosed vulnerability (ZAI-2026-JOY36X)

Not disclosed. Details are not yet publicly disclosed...

EUVD-2007-5107

Malware in sbrugna...

EUVD-2007-5999

Malware in sbrugna...

EUVD-2007-3621

Malware in sbrugna...

EUVD-2007-4355

Malware in sbrugna...

EUVD-2007-6001

Malware in sbrugna...

EUVD-2007-3825

Malware in sbrugna...

EUVD-2010-0303

Malware in sbrugna...

EUVD-2024-22309

Malicious code in bioql PyPI...

CVE-2024-6107

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps...

CVE-2025-1709

creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885 2025-07-03 06:23:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2...

I added support for ALT Linux OVAL content in Linux Patch Wednesday

I added support forALT Linux OVAL contentin Linux Patch Wednesday. Now I track when specific CVEs were fixed in ALT Linux packages and take that into account when generating the monthly bulletins. The more data sources on patched vulnerabilities in Linux distributions are used, the more accurate...

CVE-2007-3841

Unspecified vulnerability in Pidgin formerly Gaim 2.0.2 for Linux allows remote authenticated users, who are listed in a users list, to execute certain commands via unspecified vectors, aka ZD-00000035. NOTE: this information is based upon a vague advisory by a vulnerability information sales...

Security Advisory 0115

Security Advisory 0115 . CSAF PDF Date: April 15, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 15, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-0505 CVSSv3.1 Base Score: 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Common Weakness Enumeration:CWE- CWE-269: Improp...

CVE-2025-21988

In the Linux kernel, the following vulnerability has been resolved: fs/netfs/readcollect: add to next-prevdonated If multiple subrequests donate data to the same "next" request depending on the subrequest completion order, each of them would overwrite the prevdonated field, causing data corruptio...