CVE-2026-41381

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

PT-2026-35767

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.31 Description An authorization bypass exists in the Discord voice ingress. This issue allows attackers to circumvent channel and member allowlist restrictions by exploiting improper channel name validation an...

EUVD-2026-25280

Contour has Lua code injection via Cookie Path Rewrite Policy...

Contour 代码注入漏洞

Contour is an open-source Kubernetes ingress controller that uses Envoy proxies. Versions of Contour from v1.19.0 to v1.33.4, v1.32.5 before v1.32.5, and v1.31.6 before v1.31.6 had a code injection vulnerability. This vulnerability stemmed from the Cookie rewriting feature, which was vulnerable t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013471)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013471 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...

CVE-2026-41059 OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments are affected when all of the following are true: Use of skipauthroutes or the legacy skipauthregex; use of patterns...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011358 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-011212)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011212 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix memleak in skpsockqueuemsg If tcpbpfsendmsg is running during a tear down...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: vault-k8s, nri-f5, buf, prometheus, blobfuse2, dgraph, gitaly, grafana-operator, cni-plugins, gitleaks, http-echo, mattermost, telegraf, tetragon, mongo-tools, coredns, go, delve, nri-consul, newrelic-nri-statsd, gitlab-kas, tkn, gitlab-pages, hey,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: vault-k8s, nri-f5, buf, prometheus, blobfuse2, dgraph, gitaly, grafana-operator, cni-plugins, gitleaks, http-echo, mattermost, telegraf, tetragon, mongo-tools, coredns, go, delve, nri-consul, newrelic-nri-statsd, gitlab-kas, tkn, gitlab-pages, hey,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: vault-k8s, nri-f5, buf, prometheus, blobfuse2, dgraph, gitaly, grafana-operator, cni-plugins, gitleaks, http-echo, mattermost, telegraf, tetragon, mongo-tools, coredns, go, delve, nri-consul, newrelic-nri-statsd, gitlab-kas, tkn, gitlab-pages, hey,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: vault-k8s, nri-f5, buf, prometheus, blobfuse2, dgraph, gitaly, grafana-operator, cni-plugins, gitleaks, http-echo, mattermost, telegraf, tetragon, mongo-tools, coredns, go, delve, nri-consul, newrelic-nri-statsd, gitlab-kas, tkn, gitlab-pages, hey,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: traefik-fips, argo-workflows, crossplane-function-environment-configs-fips, gitaly, tigera-operator, helm-fips, vault-env, cloudbeat, verticadb-operator-fips, kubernetes-fips, crossplane-function-environment-configs, mage, mongo-tools, gitlab-kas-fips, spilo, buf,...

GHSA-CQRX-3M42-5P5W vulnerabilities

Vulnerabilities for packages: traefik-fips, argo-workflows, crossplane-function-environment-configs-fips, gitaly, tigera-operator, helm-fips, vault-env, cloudbeat, verticadb-operator-fips, kubernetes-fips, crossplane-function-environment-configs, mage, mongo-tools, gitlab-kas-fips, spilo, buf,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: traefik-fips, argo-workflows, crossplane-function-environment-configs-fips, gitaly, tigera-operator, helm-fips, vault-env, cloudbeat, verticadb-operator-fips, kubernetes-fips, crossplane-function-environment-configs, mage, mongo-tools, gitlab-kas-fips, spilo, buf,...

CVE-2026-27144 vulnerabilities

Vulnerabilities for packages: traefik-fips, argo-workflows, crossplane-function-environment-configs-fips, gitaly, tigera-operator, helm-fips, vault-env, cloudbeat, verticadb-operator-fips, kubernetes-fips, crossplane-function-environment-configs, mage, mongo-tools, gitlab-kas-fips, spilo, buf,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007242 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, omnibump, polaris, stakater-reloader, dgraph, local-path-provisioner, smokescreen, flux-image-automation-controller, grafana-operator, kubewatch, flux, mariadb-operator, dkron, gh, clickhouse-operator, go, metacontroller, nodetaint,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: incert, envoy-ratelimit, buf, timoni, local-path-provisioner, k3d, secrets-store-csi-driver, mailpit, chisel, temporal-ui-server, prometheus-operator, cluster-autoscaler, opentelemetry-operator, timescaledb-parallel-copy, kafka-proxy, nerdctl, bom,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, tempo, crossplane-function-environment-configs-fips, gitaly, knative-client, terraform-provider-sendgrid-fips, authservice-fips, helm-fips, vault-env, dynamic-localpv-provisioner, spegel, cloudbeat, aws-flb-kinesis,...