GO-2026-5039 vulnerabilities

Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, pgpool2exporter, golangci-lint, crossplane-provider-azure-sql, vcluster, delve, kiali, kaniko, pinact, flyte, kube-fluentd-operator, consul-k8s, helm, kubernetes-csi-livenessprobe,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: src, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, flux-source-controller, kubewatch, ferretdb, kube-fluentd-operator, scorecard, helm, crossplane-provider-azure, mongo-tools, ollama, frp, cilium-cli, rqlite, memcached-exporter,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, src, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, docker, flux-source-controller, neuvector-sigstore-interface, scorecard, helm, step-issuer, steampipe, tw, crossplane-provider-aws-sns, cilium-cli, nfpm, argo-events, buildkitd,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: src, flux-kustomize-controller, postgres-operator, pgpool2exporter, golangci-lint, crossplane-provider-azure-sql, sbomqs, neuvector-sigstore-interface, sriov-network-device-plugin, ferretdb, scorecard, helm, kubernetes-csi-livenessprobe, kubernetes-dns-node-cache,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: flux-source-controller, neuvector-sigstore-interface, kubescape, teleport, sigstore-scaffolding, kyverno-notation-aws, witness, gitsign, skaffold, goreleaser, aactl, cosign, tflint, falcoctl, spire-server, zot, docker-cli-buildx, gh, tkn, ko, policy-controller, zarf,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: docker, flux-source-controller, neuvector-sigstore-interface, trivy-operator, kubescape, teleport, sigstore-scaffolding, crossplane, kyverno-notation-aws, witness, slsa-verifier, gitsign, skaffold, goreleaser, buildkitd, cosign, aactl, tflint, falcoctl, spire-server,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: src, cni-plugins, delve, docker-cli, neuvector-sigstore-interface, rclone, regclient, kyverno-notation-aws, mongo-tools, steampipe, aws-privateca-issuer, cilium-cli, argo-events, kubernetes-dashboard-web, buildkitd, tflint, cluster-api-helm-controller, cloud-sql-prox...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: docker, flux-source-controller, neuvector-sigstore-interface, trivy-operator, kubescape, teleport, sigstore-scaffolding, kyverno-notation-aws, witness, slsa-verifier, gitsign, skaffold, goreleaser, buildkitd, cosign, aactl, tflint, falcoctl, spire-server, zot, gh, tk...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: docker, flux-source-controller, neuvector-sigstore-interface, trivy-operator, kubescape, teleport, sigstore-scaffolding, kyverno-notation-aws, witness, slsa-verifier, gitsign, skaffold, goreleaser, buildkitd, cosign, aactl, tflint, falcoctl, spire-server, zot, gh, tk...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: src, flux-kustomize-controller, vt-cli, spicedb, golangci-lint, melange, delve, flux-source-controller, kubewatch, rclone, ferretdb, flyte, scorecard, helm, kubernetes-csi-livenessprobe, kubernetes-dns-node-cache, regclient, crossplane-provider-azure, mongo-tools,...

ReconTitan

A security-hardened platform for external reconnaissance, OSIN...

VulnCheck KEV: CVE-2026-45298

Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy the documented quickstart, no DOZZLEAUTHPROVIDER set, POST /api/notifications/test-webhook is reachable without authentication and forwards an attacker-controlled URL into a WebhookDispatcher that...

wp-forge

wp-forge wp-forge scans WordPress.org plugins for serious PHP...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...

ai-threat-detection

css █████╗ ███╗ ██╗ ██████╗ ███████╗██╗ ██╗ ██╗█████...

django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-73621 via gitpython (1.0.1)

gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...

django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-73622 via gitpython (1.0.1)

gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...

django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-73624 via gitpython (1.0.1)

gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...

CVE-Web-Framework

Web Framework CVE Vulnerability Reproduction Testbed Warn...

CVE-2026-73483 Flowise before 3.1.3 Sandbox Escape via Puppeteer

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...