1329 matches found
USN-8668-1: Linux kernel (GCP) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
USN-8668-1 linux-gcp-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-gcp-fips, velero-plugin-for-aws-fips, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-gcp, velero-plugin-for-aws...
USN-8644-2: Linux kernel (GCP) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP protocol; - TIPC protocol...
USN-8644-2 linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP protocol; - TIPC protocol...
USN-8660-1 linux-gcp, linux-gke vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: fluent-operator, keda, cluster-api-helm-controller, kwok, flux-notification-controller, kubernetes-csi-external-attacher, kube-state-metrics, cilium, flux-helm-controller, openbao, rancher, cluster-autoscaler, flux-kustomize-controller, node-feature-discovery,...
CVE-2026-15623
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
CVE-2026-15623
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
Malicious code in upload-to-gcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094f90a9780964738c1b9aea702c5554c802fba03f1a7e28c0703531dd04590 [email protected] runs a postinstall lifecycle script on npm install that collects host identifiers os.hostname, process.platform, process.arch, No...
MAL-2026-14067 Malicious code in upload-to-gcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094f90a9780964738c1b9aea702c5554c802fba03f1a7e28c0703531dd04590 [email protected] runs a postinstall lifecycle script on npm install that collects host identifiers os.hostname, process.platform, process.arch, No...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: gptscript, tofu-controller, chisel, flux-notification-controller, crossplane-provider-aws-dynamodb, sftpgo-plugin-geoipfilter, fluxcd-kustomize-mutating-webhook, rancher-loglevel, src, flux-kustomize-controller, nats-top, esbuild, ferretdb, gitness, mattermost, extis...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: gptscript, migrate, nri-apache, delve, src, headlamp, cni-plugins, oauth2-proxy, cloud-provider-gcp-cloud-controller-manager, kor, kubernetes-dashboard-auth, k3s, dive, kuberlr, nodetaint, rabbitmq-cluster-operator, fulcio, undock, ko, regclient, kpt,...
GHSA-VX5Q-9X62-9QQG vulnerabilities
Vulnerabilities for packages: linux-gcp...
GHSA-WR2H-54M4-VP72 vulnerabilities
Vulnerabilities for packages: linux-gcp...
GHSA-X828-8HM7-W4XW vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-64265 vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-64268 vulnerabilities
Vulnerabilities for packages: linux-gcp...