CVE-2026-74426 afs: fix NULL pointer dereference in afs_get_tree()

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null. In traceafsgettree they are dereferenced. KASAN error message: KASAN...

PT-2026-72862

In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afs get tree afs alloc sbi uses kzalloc for memory allocation. And, if ctx-dyn root is not null, as-cell and as-volume are null. In trace afs get tree they are dereferenced. KASAN error messag...

PT-2026-72260

In the Linux kernel, the following vulnerability has been resolved: tracing/user events: Fix use-after-free in user event mm dup user event mm dup walks the parent mm's enabler list locklessly under rcu read lock during fork from copy process; it does not take event mutex: rcu read lock; list for...

MAL-2026-14087 Malicious code in mw-filesystem-events-nodream-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e79317db717bd6c38646bef40f0e5205e0f42a3174319f95d9b5e7153cc8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2023-1930 vulnerabilities

Vulnerabilities for packages: argo-events, argo-events-fips...

GO-2025-3608 vulnerabilities

Vulnerabilities for packages: argo-events-fips...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: task, gptscript, argo-workflows-fips, wolfictl, flux-image-automation-controller, argocd-image-updater-fips, argo-events-fips, grype, bom, go-licenses, skaffold, src-fingerprint, argo-workflows, argo-events, nuclei, nemo, gitsign, kargo, tfsec,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cluster-api-aws-controller-fips, argo-events-fips, splunk-otel-collector-fips, splunk-otel-collector, vault-fips, amazon-cloudwatch-agent, argo-events, cluster-api-aws-controller, dapr-fips, vault, jitsucom-bulker,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-transcribe, dns-controller-manager-fips, flagger, dockerize-fips, cosmo-router-fips, gitlab-runner-fips, chisel-fips, crossplane-provider-aws-s3, crossplane-aws-monolith-fips, longhorn-engine, nrdot-collector-k8s-fips,...

GO-2026-5410 vulnerabilities

Vulnerabilities for packages: goreleaser, atlantis, argo-rollouts, argo-cd, kyverno-policy-reporter, argo-events, kubewatch, bento, kubernetes-event-exporter...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: gptscript, gitsign, kubevela, pulumi-language-java, grafana-alloy, dagger, kargo, pulumi-language-dotnet, zarf, bom, guac, flux, snyk-cli, flux-source-controller, src-fingerprint, argo-events, pulumi, osv-scanner, pulumi-kubernetes-operator, go-licenses,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: gptscript, gitsign, kubevela, pulumi-language-java, grafana-alloy, dagger, kargo, pulumi-language-dotnet, zarf, bom, guac, flux, snyk-cli, flux-source-controller, src-fingerprint, argo-events, pulumi, osv-scanner, pulumi-kubernetes-operator, go-licenses,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gptscript, gitsign, kubevela, pulumi-language-java, grafana-alloy, trufflehog, dagger, kargo, kyverno, pulumi-language-dotnet, witness, zarf, bom, nfpm, external-secrets-operator, guac, xeol, flux, snyk-cli, trivy-operator, flux-source-controller, src-fingerprint,...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, falco-no-driver, gitsign, argo-cd, k3s, helm, argo-events, kyverno, opentofu, istio, prometheus, mattermost, telegraf, containerd, external-secrets-operator, guac, terragrunt...

GO-2023-1930 vulnerabilities

Vulnerabilities for packages: argo-events...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, amazon-cloudwatch-agent, cluster-api-aws-controller, grafana-alloy, splunk-otel-collector, argo-events, opentelemetry-collector-contrib, bento, sqlexporter...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: falcoctl, thanos, trino, py3-cassandra-medusa, zarf, druid, rclone, guac, cosign, flux, bank-vaults, prometheus-operator, policy-controller, restic, airflow, flux-source-controller, argo-events, pulumi, spire-server, rekor, rook, ksops, terragrunt, goreleaser,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, dagger, kargo, witness, gitlab-pages, nfpm, cosign, crossplane-provider-aws-iam, k3s, loki, gomplate, kaf, datadog-agent, steampipe, crossplane-provider-family-azure, crossplane-provider-aws-s3, k9s, cloudflared, caddy,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: mongo-tools, mockgen, witness, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-driver-nfs, cis-operator, nri-haproxy, rclone, wire-go, cloud-sql-proxy, undock, delve, amazon-cloudwatch-agent-operator, rabbitmq-messaging-topology-operator, k3s,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-notification-controller, gitsign, crossplane-provider-azure, glab, kubevela, crossplane-provider-azure-storage, kargo, skopeo, zarf, crossplane-provider-azure-sql, gh, guac, flux-helm-controller, cosign, flux, bank-vaults,...