GO-2026-4918 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, crossplane-provider-azure-portal, crossplane-provider-terraform-fips, k8s-metacollector-fips, rke2-runtime, docker-credential-ecr-login-fips, wave-fips, trivy-k8s-wrapper, prometheus-alertmanager, litestream, syncthing-fips, cilium-fips,...

CVE-2025-53938

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authentication Bypass vulnerability was identified in the /dao/verificarrecursoscargo.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows unauthenticated...

CVE-2025-53938

WeGIA has an authentication bypass vulnerability in the /dao/verificar_recursos_cargo.php API endpoint, affecting versions prior to 3.4.5. Unauthenticated users can access protected functionality and retrieve sensitive information by crafting HTTP requests without session cookies or tokens. Versi...