GO-2026-4289 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, cloudflared, eks-distro, eks-distro-fips...

GO-2024-2785 vulnerabilities

Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache, juicefs...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, k8sgateway, juicefs, eks-distro-fips, k8sgateway-fips, cloudflared, eks-distro, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache...

GO-2024-2682 vulnerabilities

Vulnerabilities for packages: k3s, q, cloudflared, caddy, caddy-fips...

GO-2024-2785 vulnerabilities

Vulnerabilities for packages: cloudflared, juicefs, kubernetes-dns-node-cache...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: cloudflared, k8sgateway, juicefs, kubernetes-dns-node-cache...

GO-2026-4289 vulnerabilities

Vulnerabilities for packages: cloudflared...

GO-2024-2682 vulnerabilities

Vulnerabilities for packages: cloudflared, q, caddy, k3s...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: rclone, sftpgo, cloudflared, caddy, buf, gogatekeeper, step, karma, kyverno-policy-reporter-ui, step-ca, gitness, tkn, step-issuer...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, cloudflared, spegel, caddy, buf, frp, q, k3s...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: sops, gitsign, terragrunt, slsa-verifier, aactl, tekton-chains, vexctl, kots, flux-kustomize-controller, cloudflared, cosign, flux-source-controller, oauth2-proxy, tkn, dex, kubescape, argo-workflows, spire-server, fulcio, rekor...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: drone-fips, timestamp-authority-fips, consul-k8s, zabbix-agent2, gostatsd, gomplate, crossplane-provider-aws-grafana-fips, crossplane-provider-aws-ssoadmin-fips, go-fips, kyverno-policy-reporter-plugins-trivy-fips, hydra, external-secrets-operator-fips,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, kubernetes-dashboard-api, flux, promxy, victoriametrics-cluster, knative-serving, gitea, terraform-mcp-server, minio-object-browser, croc, crossplane-provider-azure-sql, scorecard, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, pdfcpu,...

Security update for cloudflared (important)

openSUSE security update: security update for cloudflared ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20893-1 Rating: important References: bsc1234582 bsc1239422 bsc1253918 bsc1265920 bsc1266794 Cross-References: CVE-2024-45337 CVE-2025-22869...

OPENSUSE-SU-2026:20893-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 Add more information to proxy-dns removal message Update tail command to use /management/logs endpoint Add cloudflared management token command Fix bugs Update golang.org/x/net to 0.55.0...

cloudflared-2026.5.2-1.1 on GA media (moderate)

cloudflared-2026.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10908-1 Rating: moderate Cross-References: CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:...

OPENSUSE-SU-2026:10908-1 cloudflared-2026.5.2-1.1 on GA media

These are all security issues fixed in the cloudflared-2026.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

Summary Multiple functions conduct substring-only matching to validate hostnames to which basic authorization should be sent. An attacker can append the matched substrings to an attacker-controlled endpoint and capture authentication. Details api/services/website/cacheAddress.js,...

PT-2026-7491

A stack-use-after-return issue exists in the Arduino Core STM32 library prior to version 1.7.0. The pwm start function allocates a TIM HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the functi...

cloudflared-2025.11.1-1.1 on GA media (moderate)

cloudflared-2025.11.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15763-1 Rating: moderate Cross-References: CVE-2025-22869 CVE-2025-58181 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2...