GO-2026-4918 vulnerabilities

Vulnerabilities for packages: conftest, crossplane-provider-aws-elasticsearch, crossplane-provider-aws-macie2-fips, crossplane-provider-aws-acm, splunk-otel-collector, aws-s3-controller, crossplane-provider-aws-guardduty, karma-fips, clickhouse-operator-fips, tekton-chains, policy-bot,...

CVE-2025-53938

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authentication Bypass vulnerability was identified in the /dao/verificarrecursoscargo.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows unauthenticated...

CVE-2025-53938

WeGIA has an authentication bypass vulnerability in the /dao/verificar_recursos_cargo.php API endpoint, affecting versions prior to 3.4.5. Unauthenticated users can access protected functionality and retrieve sensitive information by crafting HTTP requests without session cookies or tokens. Versi...