Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0335-1 Rating: important References: 1258543 1276745 1278002 1278624 1278702 1279390 1279392 1279395 1280111 Cross-References: CVE-2026-24122 CVE-2026-37236 CVE-2026-41178 CVE-2026-50163 CVE-2026-53495...

CVE-2026-72815

creationtimestamp| type| source ---|---|--- 2026-09-10 04:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101882 2026-09-10 05:00:05+00:00| published-proof-of-concept| Telegram/gOw7ciMZOTUWYNYtqA2ln1nEEiajeumMwU7KLhL3ORvBRlQ 2026-09-11 00:00:52+00:00| published-proof-of-concep...

OPENSUSE-SU-2026:21670-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.8.2 Update vendor archive to fix github.com/go-chi/chi/v5 boo1276196, CVE-2026-72815, CVE-2026-72816, CVE-2026-72817 Add OpenRC support Migrate config renovate.json Fix bugs...

DEBIAN-CVE-2026-72815

go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...

CVE-2026-72815 go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header

go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...

Linux Distros Unpatched Vulnerability : CVE-2026-72815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the...