CLEANSTART-2026-AM62510 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the consul-k8s-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-DK21995 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cert-manager package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-WP38878 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cloudnative-pg-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-XH08905 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cloudnative-pg package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-XD97487 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cloudnative-pg package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-YZ14479 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the dex package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-UD94273 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the dex package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-FY06810 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cloudnative-pg package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

EUVD-2026-82602

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

SUSE CVE-2026-77403

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Connection.openTune in connection.go accepts a server-advertised FrameMax below the AMQP frameMinSize value of 4096 bytes because the connection negotiation loop does not enforce the protocol minimum. A malicious or compromised AMQP...

SUSE CVE-2026-85731

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of OCI layers marked with io.deis.oras.content.unpack=true can write outside the store working directory. The pushDir path through extractTarDirectory and ensureLinkPath validates symlink targets...

SUSE CVE-2026-85732

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then...

CVE-2026-93450

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

AZL-103377 CVE-2026-93450 affecting package kubevirt 1.8.4-2

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...

The vulnerability of the `extractTarDirectory` and `ensureLinkPath` functions in the `content/file.Store` component of the oras-go programming language library allows a malicious actor to gain unauthorized access to create and re-write files.

The vulnerability of the extractTarDirectory and ensureLinkPath functions in the content/file.Store component of the oras-go library is related to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create and...

The vulnerability of the formWrlExtraSet function (/goform/WrlExtraSet) of the Tenda CH22 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formWrlExtraSet /goform/WrlExtraSet function in the Tenda CH22 router microprogramming system lies in the reading of data outside the buffer in memory during the processing of the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

The vulnerability of the fromWrlclientSet() function in the httpd daemon’s microprogramming software for Tenda FH1202 allows a hacker to execute arbitrary code.

The vulnerability of the fromWrlclientSet function in the httpd daemon’s microprogramming system for Tenda FH1202 is related to the issue where an operation is performed outside the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability of the WrlExtraSet() function in the httpd daemon of the microprogramming router software Tenda FH1202 allows a hacker to execute arbitrary code.

The vulnerability of the WrlExtraSet function in the httpd daemon of the microprogramming router Tenda FH1202 is related to the execution of an operation outside the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WrlclientSet() function (/goform/WrlclientSet) of the Tenda FH451 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the WrlclientSet function /goform/WrlclientSet of the Tenda FH451 router microprogramming system is related to buffer overflow in the stack when processing the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the fromSafeClientFilter() function (/goform/SafeClientFilter) in the httpd microprogramming system for Tenda F451 components allows a attacker to cause a service failure.

The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the httpd microprogramming system for Tenda F451 routers is related to the issue of the operation going beyond the buffer in memory when processing the manufacturer/Go parameter. Exploiting this vulnerability could...