CVE-2026-57021

An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...

CVE-2026-57021 Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

An Out-of-bounds Write vulnerability in the http-gatekeeper http-gk of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a...

PT-2026-56975

Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions prior to 23.2R2-S7 Junos OS on SRX Series versions prior to 23.4R2-S8 Junos OS on SRX Series versions prior to 24.2R2-S4 Junos OS on SRX Series versions prior to 24.4R2-S4 Junos OS on SRX Series versions prior t...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: go-discover-fips, amazon-ssm-agent, seaweedfs-rocksdb, grype, step-kms-plugin, crossplane-provider-azure-web, datadog-agent-fips, tkn, caddy-fips, chainloop-cli, melange, drone, grype-db, flux-image-automation-controller, flux-source-controller, mattermost-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: go-discover-fips, amazon-ssm-agent, seaweedfs-rocksdb, grype, step-kms-plugin, crossplane-provider-azure-web, datadog-agent-fips, tkn, caddy-fips, chainloop-cli, melange, drone, grype-db, flux-image-automation-controller, flux-source-controller, mattermost-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, drone, flux-image-automation-controller, flux-source-controller, mattermost-fips, gitlab-workhorse-ce, opentofu-fips, harbor-fips, argocd-image-updater, istio, kubescape-server, elastic-agent-fips, trivy-operator-fips, external-secrets-operator,...

GO-2026-5527 Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go) in github.com/argoproj/argo-workflows

Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS gatekeeper.go in github.com/argoproj/argo-workflows...

CVE-2026-42890

Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...

Arbitrary Code Injection

Overview desktop-electron is a My Electron application description Affected versions of this package are vulnerable to Arbitrary Code Injection via the ELECTRONRUNASNODE environment variable. An attacker can execute arbitrary code with the application's entitlements and code signature by launchin...

EUVD-2026-36547

Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...

CVE-2026-42890 actual Allows Electron to Run As Node

Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...

CVE-2026-42890

CVE-2026-42890 affects the macOS desktop application Actual (version 25.x, Electron 39.2.7). The ELECTRON_RUN_AS_NODE fuse was not disabled, allowing a local attacker who can place a file on disk or influence command-line arguments to invoke Actual.app with ELECTRON_RUN_AS_NODE=1. This converts t...

PT-2026-47599

Name of the Vulnerable Software and Affected Versions Actual versions prior to 26.5.0 Description In the macOS desktop application, the ELECTRON RUN AS NODE fuse is not disabled. This allows an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app...

PT-2026-47558

Summary A electron run as node vulnerability was identified in actual macOS application, version 25.x Electron 39.2.7. Vulnerability Type: Electron Run As Node Description ELECTRON RUN AS NODE fuse enabled Electron 39.2.7 — app can be converted to Node.js REPL for arbitrary code execution Impact ...

CVE-2026-28954

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A maliciously crafted disk image may bypass Gatekeeper checks...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via improper handling of file paths in the Bucket reconciliation process and the sparse-checkout feature for GitRepository resources. An attacker can write files outside the intended working directory or enumerat...

gatekeeper_wan_poc_server

This is the...

GHSA-FQW6-GF59-QR4W vulnerabilities

Vulnerabilities for packages: containerd, k9s, k3s, manifest-tool, k8sgpt, syft, buildkitd, helm-push, envoy-gateway, k8ssandra-client, helm-mapkubeapis, zarf, rancher-helm, grype, kubevela, xeol, kubescape-operator, falco-no-driver, linkerd2, neuvector-scanner, spegel, gatekeeper, docker-compose...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: containerd, k9s, k3s, manifest-tool, k8sgpt, syft, buildkitd, helm-push, envoy-gateway, k8ssandra-client, helm-mapkubeapis, zarf, rancher-helm, grype, kubevela, xeol, kubescape-operator, falco-no-driver, linkerd2, neuvector-scanner, spegel, gatekeeper, docker-compose...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: grype, datadog-agent-fips, grype-db, newrelic-infrastructure-agent-fips, neuvector-fips, helm-operator, chainctl, kube-arangodb, docker-compose-fips, cluster-api-helm-controller, kubescape-server, rancher-helm, amazon-ecs-agent-fips, trivy-operator-fips, linkerd2,...