Lucene search
+L

17569 matches found

Github Security Blog
Github Security Blog
added 2026/07/14 5:54 p.m.17 views

K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression

Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...

5.8CVSS6.2AI score0.00167EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/14 5:29 p.m.97 views

GO-2026-5942 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

7.5CVSS5.3AI score0.00549EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/07/14 5:29 p.m.8 views

Uncaught Exception

Overview std/net is a Go standard library package std/net Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report:Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. Remediation Upgrade std/net to...

8.7CVSS7.7AI score0.00549EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/14 5:07 p.m.14 views

MAL-2026-10610 Malicious code in proxy-check-ii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a736498f3f882a4ba79f793dc893883db41d8cb5a74ecfe0c66dace9cc477a20 The wheel is advertised as 'proxy-check-ii' with a one-line summary of 'packaged command for running the bundled qsshd executable' and no README,...

6.3AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/14 3:46 p.m.18 views

CVE-2026-50151

A flaw was found in oras-go. During the monolithic blob upload process, oras-go reuses the Authorization header for subsequent requests, even if a malicious registry provides a cross-host Location header. This vulnerability allows an attacker-controlled endpoint to receive the caller's credential...

7.5CVSS6AI score0.00382EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2026/07/14 3:41 p.m.21 views

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

7.5CVSS6.9AI score0.00813EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/14 3:41 p.m.22 views

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS6.9AI score0.00813EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/14 3:11 p.m.15 views

CVE-2026-50163

A flaw was found in oras-go, a Go library used for managing OCI Open Container Initiative artifacts. An attacker can exploit this vulnerability by providing a specially crafted tarball containing a malicious hardlink. When this tarball is extracted, the hardlink can be manipulated to point to fil...

7.1CVSS6AI score0.00346EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/14 2:58 p.m.38 views

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

7.5CVSS6.9AI score0.00813EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/14 1:57 p.m.18 views

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS6.9AI score0.00813EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/14 1:57 p.m.30 views

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

7.5CVSS6.9AI score0.00813EPSS
SaveExploits0References8
Rockylinux
Rockylinux
added 2026/07/14 12:05 p.m.18 views

buildah security update

An update is available for buildah. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/07/14 12:05 p.m.18 views

podman security update

An update is available for podman. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2026/07/14 12:05 p.m.14 views

RLSA-2026:38495 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: os: golang: Go os.Root: Symlink following vulnerability allows directory traversal...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/14 12:05 p.m.19 views

RLSA-2026:38494 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/14 12:03 p.m.15 views

RLSA-2026:38493 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/14 12:03 p.m.14 views

RLSA-2026:38878 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: os: golang: Go os.Root: Symlink following vulnerability allows directory traversal...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2026/07/14 12:03 p.m.17 views

podman security update

An update is available for podman. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...

7.8CVSS6.1AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2026/07/14 11:10 a.m.9 views

SUSE-SU-2026:2965-1 Security update for kubernetes-old

This update for kubernetes-old rebuilds it against the current go security release...

6.1AI score
SaveExploits0References1
OSV
OSV
added 2026/07/14 11:09 a.m.11 views

SUSE-SU-2026:2964-1 Security update for buildah

This update for buildah rebuilds it against the current go security release...

6.1AI score
SaveExploits0References1
Rows per page
Query Builder