GO-2026-5417 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, k8sgateway...

GO-2025-3743 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs...

GO-2026-4630 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, k8sgateway...

GO-2026-5583 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, k8sgateway...

GO-2026-5667 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, k8sgateway...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubernetes-dns-node-cache, datadog-operator, vitess...

GO-2026-5676 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, kubernetes-dns-node-cache, spegel, k3s, coredns, kargo, kubo, kyverno-policy-reporter, teleport, k8sgateway, kyverno-policy-reporter-ui, frp, dkron, ipfs-cluster, opentelemetry-operator, jitsucom-bulker, q, traefik...

GO-2024-2785 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs, cloudflared...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: k8sgateway, kubernetes-dns-node-cache, juicefs, cloudflared...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: caddy, kubernetes-dns-node-cache, spegel, k3s, kubo, kargo, k8sgateway, kyverno-policy-reporter-ui, frp, dkron, ipfs-cluster, q, traefik...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, ip-masq-agent, spark-operator, argocd-image-updater, cri-tools, kubeflow-pipelines, kubernetes-csi-driver-hostpath, k8s-device-plugin, local-static-provisioner...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, ip-masq-agent, spark-operator, prometheus-adapter...

GO-2025-4233 vulnerabilities

Vulnerabilities for packages: caddy, kubernetes-dns-node-cache, seaweedfs, spegel, k3s, kubo, kargo, k8sgateway, frp, dkron, ipfs-cluster, q, buf, traefik...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: caddy, kubernetes-dns-node-cache, spegel, k3s, frp, cloudflared, q, buf...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, ip-masq-agent, argocd-image-updater, kubeflow-pipelines, k8s-device-plugin, local-static-provisioner...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, timoni, newrelic-fluent-bit-output, gitleaks, rancher-loglevel, rabbitmq-cluster-operator, croc, spire-server, dask-gateway, paranoia, aws-eks-pod-identity-agent, crossplane-provider-aws-kinesis, gatus, minio, azcopy, aws-flb-cloudwatch,...

RLSA-2026:54509 Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

bind9.16 security update

An update is available for bind9.16. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Na...

CVE-2026-18109

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVE-2026-18109 W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...