containerized-data-importer1.66-api-1.66.0-1.1 on GA media (moderate)

containerized-data-importer1.66-api-1.66.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11514-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58058 CVE-2025-58190 CVE-2026-27136 CVE-2026-34986 CVE-2026-35469 CVE-2026-39821 CVE-2026-39827 CVE-2026-39828 CVE-2026-39832...

go1.25-1.25.13-1.1 on GA media (moderate)

go1.25-1.25.13-1.1 on GA media Announcement ID: openSUSE-SU-2026:11516-1 Rating: moderate Cross-References: CVE-2026-33818 CVE-2026-39821 CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 CVE-2026-56864 CVE-2026-56865 CVSS scores: CVE-2026-39821 SUSE : 7.4...

CVE-2026-73043

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and JavaScript into template calculations that execute in...

CVE-2026-73043

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and JavaScript into template calculations that execute in...

CVE-2026-73043 SiYuan before v3.7.4 Remote Code Execution via Template Calculation

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and JavaScript into template calculations that execute in...

CVE-2026-73043

SiYuan before v3.7.4 has a remote code execution vulnerability in the Template calculation operator. It renders user-authored Go templates and stores output verbatim without sanitization, permitting injection of malicious HTML/JavaScript that executes in the desktop client renderer with Node inte...

tamago v1.26.6

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors AMD64, ARM, ARM64, RISCV64. The projects spaw...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, amazon-cloudwatch-agent-operator, google-cloud-otel-ops-collector, kaf, kuberay-operator, nuclio-controller, argo-cd, flux-source-watcher, crossplane-provider-aws-dms-fips, virt-api-fips, pushprox, kubedock-fips, openbao-k8s-fips,...

GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: kaf, kuberay-operator, nuclio-controller, argo-cd, pulumi-language-yaml, kubedock-fips, crossplane-provider-aws-ec2-fips, crossplane-provider-gcp-beta-compute-fips, seaweedfs-fips, crossplane-provider-aws-sagemaker, harbor, ldap2pg-fips,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, gatekeeper, nri-couchbase, manifest-tool, aws-otel-collector, opa, traefik, pulumi-language-java, k3d, terraform-provider-tls, trillian, gostatsd, k8s-device-plugin, kubernetes-csi-external-resizer, kine,...

Beyond Single-Vulnerability Evaluation: Closing the Engineering Decision Gap between C Retrofits and Native Safety

While decades of research have produced numerous retrofitted memory-safety protections for C, these mechanisms are almost exclusively evaluated in isolation, targeting specific vulnerability classes. This siloed evaluation paradigm leaves practitioners without a clear understanding of the...

PT-2026-76442

These are all security issues fixed in the go1.25-1.25.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11516-1 go1.25-1.25.13-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11517-1 go1.26-1.26.6-1.1 on GA media

These are all security issues fixed in the go1.26-1.26.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-73050

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description A remote code execution issue exists in the Template calculation operator. The software renders user-authored Go templates and stores the output without sanitization. This allows attackers to inject...

SUSE CVE-2026-33818

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

SUSE CVE-2026-56864

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

SUSE CVE-2026-56865

A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, gatekeeper, nri-couchbase, manifest-tool, aws-otel-collector, opa, traefik, pulumi-language-java, k3d, terraform-provider-tls, trillian, gostatsd, k8s-device-plugin, kubernetes-csi-external-resizer, kine,...