GO-2025-4096 vulnerabilities

Vulnerabilities for packages: podman, falco-no-driver, nvidia-container-toolkit, grafana-alloy, sriov-network-device-plugin, node-feature-discovery, kubernetes, k3s, buildah...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: kots, gitsign, slsa-verifier, sigstore-scaffolding, witness, skopeo, falco-no-driver, zarf, falcoctl, tekton-chains, vexctl, cosign, kubescape, aactl...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: minio, crossplane-provider-aws-rds, db-operator, sbomqs, crossplane-provider-aws-s3, extism, crossplane-provider-aws-kinesis, ksops, crossplane-provider-aws-sns, wgcf, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, clickhouse-operator, dockerize,...

CLEANSTART-2026-DF29491 Security fixes in falco-exporter 0.8.7-r2

Package falco-exporter version 0.8.7-r2 fixes 1 vulnerabilities: CVE-2026-46600...

Photon OS 5.0: Falco PHSA-2023-5.0-91-0046

An update of the falco package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0046. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Falco 0.44.1

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

EUVD-2026-33329

Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary files and achieve remote code execution. The vulnerability exists due to insufficient validation of uploaded file types...

CVE-2026-39292: Unrestricted Upload of File with Dangerous Type

Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary files and achieve remote code execution. The vulnerability exists due to insufficient validation of uploaded file types...

CVE-2026-39292

Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary files and achieve remote code execution. The vulnerability exists due to insufficient validation of uploaded file types...

CVE-2026-39292

Falco Solutions PHPPageBuilder v0.31.0 is vulnerable to an unrestricted file upload vulnerability within the pagemanager/pagebuilder module. The root cause is the insufficient validation of uploaded file types and executable content, which allows remote attackers to upload arbitrary files. This f...

CVE-2026-39292

Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary files and achieve remote code execution. The vulnerability exists due to insufficient validation of uploaded file types...

PT-2026-44858

Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary files and achieve remote code execution. The vulnerability exists due to insufficient validation of uploaded file types...

CVE-2021-33505

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions = 0.29.1...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: opa-envoy, portieris, terraform-provider-sendgrid, k8ssandra-operator, hello-world-golang, sqlexporter, neuvector-dbgen, nri-haproxy, sonobuoy, kpt, nri-mysql, pguser, sealed-secrets, gotestsum, secrets-store-csi-driver-provider-azure, pdfcpu, kube-vip, nerdctl,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: delve, portieris, fq, extism, terraform-provider-sendgrid, hello-world-golang, neuvector-dbgen, argo-rollouts, cluster-proportional-autoscaler, go-bindata, flyte, sonobuoy, kpt, fluent-bit-plugin-loki, pguser, aws-signer-notation-plugin, sealed-secrets, cue, cargobum...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, terraform-provider-tls, nsc, fq, extism, portieris, terraform-provider-sendgrid, glow, hello-world-golang, wgcf, dockerize, src-fingerprint, nfs-subdir-external-provisioner, neuvector-dbgen, argo-rollouts, istio, kubescape-operator,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, terraform-provider-tls, nsc, fq, extism, portieris, terraform-provider-sendgrid, glow, hello-world-golang, wgcf, dockerize, src-fingerprint, nfs-subdir-external-provisioner, neuvector-dbgen, argo-rollouts, istio, kubescape-operator,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, terraform-provider-tls, nsc, fq, extism, portieris, terraform-provider-sendgrid, glow, hello-world-golang, wgcf, dockerize, src-fingerprint, nfs-subdir-external-provisioner, neuvector-dbgen, argo-rollouts, istio, kubescape-operator,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, terraform-provider-tls, nsc, fq, extism, portieris, terraform-provider-sendgrid, glow, hello-world-golang, wgcf, dockerize, src-fingerprint, nfs-subdir-external-provisioner, neuvector-dbgen, argo-rollouts, istio, kubescape-operator,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: wait-for-port, delve, terraform-provider-tls, nsc, fq, extism, portieris, terraform-provider-sendgrid, glow, hello-world-golang, wgcf, dockerize, src-fingerprint, nfs-subdir-external-provisioner, neuvector-dbgen, argo-rollouts, istio, kubescape-operator,...