GO-2025-3433 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2025-3720 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: kyverno, gitlab-runner, gitaly, flux-source-controller, grype, rancher-fleet, k9s, zarf, cerbos, dagger, pulumi-language-yaml, xeol, flux-image-automation-controller, crossplane, src-fingerprint, trufflehog, wolfictl, kubescape, external-secrets-operator, flux, kargo...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-source-controller, hugo-extended, tekton-chains, zarf, py3-azure-identity, policy-controller, bank-vaults, boring-registry, thanos, tkn, sqlpad, step-ca, tempo, rekor, kubescape, flux-kustomize-controller, prometheus-operator, flux, sigstore-scaffolding, cortex,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: gitaly, zarf, fuse-overlayfs-snapshotter, sbom-convert, croc, kube-arangodb, aws-flb-kinesis, cert-manager, secrets-store-csi-driver-provider-gcp, cloud-provider-aws, secrets-store-csi-driver, ctop, ratify, nri-prometheus, dkron, pguser, sftpgo,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, cni-plugins, fuse-overlayfs-snapshotter, grpcurl, kustomize, speedtest-go, kube-bench, mage, nri-memcached, src-fingerprint, protoc-gen-go-grpc, kine, gke-gcloud-auth-plugin, terraform, aws-flb-kinesis, kind, kubernetes-event-exporter, src,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, gitlab-runner, prometheus, sealed-secrets, harbor, envconsul, rancher-fleet, zarf, crossplane-provider-aws-sns, fuse-overlayfs-snapshotter, policy-controller, kube-bench, speedtest-go, traefik, trufflehog, bank-vaults, src-fingerprint, croc,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kpt, aactl, kubernetes-dashboard, argocd-image-updater, bom...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitlab-runner, prometheus, sealed-secrets, ko, zarf, crossplane-provider-aws-sns, tw, policy-controller, traefik, kine, step-kms-plugin, neuvector-sigstore-interface, src, cilium-cli, prometheus-operator, podman, cert-manager, kots, openbao, syft, buildah,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: verticadb-operator, gitlab-runner, lvm-driver, sealed-secrets, spire-server, git-lfs, crossplane-provider-aws-sns, fuse-overlayfs-snapshotter, whereabouts, grpcurl, kustomize, policy-controller, kube-bench, traefik, sftpgo-plugin-kms, bank-vaults, boring-registry,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, zarf, policy-controller, flux-image-automation-controller, bank-vaults, src-fingerprint, crossplane-provider-azure, tkn, crossplane-provider-azure-managedidentity, terraform, step-ca, k3d, neuvector-sigstore-interface, kubescape...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: flux-source-controller, ko, tekton-chains, zarf, policy-controller, tkn, wolfictl, neuvector-sigstore-interface, kubescape, vexctl, gitsign, slsa-verifier, aactl, apko, spire-server, falcoctl, goreleaser, melange, skaffold, zot...

PT-2026-72054

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-73415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in...

CVE-2026-73652

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652 vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

CVE-2026-73652

In vantage6, versions

CVE-2026-33328

A flaw was found in libvips, an image processing library. On 32-bit systems, a vulnerability in the gifload operation could lead to an integer overflow due to incorrectly determined image dimensions. This could allow a local attacker to cause the application to crash, resulting in a denial of...

Important: Red Hat Security Advisory: compat-libtiff3 security update

An update for compat-libtiff3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...