CVE-2026-45725

A flaw was found in compliance-trestle. The library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher does not properly sanitize path traversal sequences ../ when constructing local cache file paths from URLs. A remote attacker can exploit this by referencing a malicious URL in an...

RLSA-2026:54510 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

bind security update

An update is available for bind. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Name...

WordPress W3 Total Cache plugin <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability

Unauthenticated Stored Cross-Site Scripting via Comment Author Name vulnerability discovered by daroo in WordPress Plugin W3 Total Cache versions = 2.10.3...

GO-2026-4630 vulnerabilities

Vulnerabilities for packages: juicefs, k8sgateway-fips, k8sgateway, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...

GO-2026-4969 vulnerabilities

Vulnerabilities for packages: juicefs, k8sgateway-fips, k8sgateway, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...

GO-2026-5417 vulnerabilities

Vulnerabilities for packages: juicefs, k8sgateway-fips, k8sgateway, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...

GO-2026-5583 vulnerabilities

Vulnerabilities for packages: juicefs, k8sgateway-fips, k8sgateway, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...

GO-2026-5667 vulnerabilities

Vulnerabilities for packages: juicefs, k8sgateway-fips, k8sgateway, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...

GO-2025-3743 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...

GO-2026-4635 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro-fips, eks-distro...

GO-2026-5164 vulnerabilities

Vulnerabilities for packages: juicefs, k8sgateway-fips, k8sgateway, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, eks-distro-fips, eks-distro...

GO-2024-2785 vulnerabilities

Vulnerabilities for packages: cloudflared, juicefs, kubernetes-dns-node-cache...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: frp, kubernetes-dns-node-cache, spegel, buf, caddy, kubernetes-dns-node-cache-fips, q, k3s, traefik-fips, caddy-fips, cloudflared, eks-distro-fips, eks-distro, traefik...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: buildkite-agent, buildkite-agent-fips, datadog-agent, kubernetes-dns-node-cache, coder-fips, kubernetes-dns-node-cache-fips, vitess, coder, datadog-operator, datadog-agent-fips, datadog-operator-fips, traefik-fips, eks-distro-fips, eks-distro, traefik...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, kubernetes-dns-node-cache, aws-ebs-csi-driver, aws-efs-csi-driver, spark-operator, nodetaint, aws-efs-csi-driver-fips, ip-masq-agent...

GO-2026-4635 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache...

GO-2026-5417 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, k8sgateway...

GO-2026-4969 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, k8sgateway...

GO-2026-5164 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, k8sgateway...