GO-2023-1765 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, aactl...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argo-events, crossplane, syft, snyk-cli, bom, scorecard, wolfictl, gitsign, flux-source-controller, apko, kots, k9s, argocd-image-updater, gptscript, zot, tfsec, timoni, dagger, pulumi-language-java, melange, gitea, flux-image-automation-controller, trivy, osv-scanne...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argo-events, crossplane, syft, snyk-cli, bom, scorecard, wolfictl, gitsign, flux-source-controller, apko, kots, k9s, argocd-image-updater, gptscript, zot, tfsec, timoni, dagger, pulumi-language-java, melange, gitea, flux-image-automation-controller, trivy, osv-scanne...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, argo-events, crossplane, syft, kyverno, snyk-cli, bom, scorecard, wolfictl, gitsign, flux-source-controller, apko, kots, k9s, argocd-image-updater, gitaly, gptscript, teleport, steampipe, rancher-fleet, gomplate, trivy-operator, cerbos,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, newrelic-infra-operator, crossplane-provider-aws-dynamodb, gostatsd, external-secrets-operator, nri-apache, istio, crossplane, harbor, snyk-cli, helm, kubo, buildah, crossplane-provider-aws-kms, docker-credential-acr-env, govulncheck,...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, aactl...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, external-secrets-operator, istio, rootlesskit, snyk-cli, wolfictl, helm, buildah, crossplane-provider-aws-kms, tw, crossplane-provider-keycloak, apko, docker-cli-buildx, buildkitd, gptscript, openbao, gomplate, zot, dagger, melange,...

thrift: Apache Thrift: Denial of Service due to uncontrolled resource allocation

A flaw was found in Apache Thrift Java bindings. This vulnerability, categorized as an Allocation of Resources Without Limits or Throttling, allows a remote attacker to cause a denial of service by exhausting system resources. The flaw occurs when the application fails to properly limit or thrott...

CVE-2026-18511

IBM i 7.3–7.6 is affected by CVE-2026-18511. The vulnerability arises in the Native IBM i JSSE provider during TLS session establishment due to improper bounds checking, allowing a local authenticated attacker to overflow a fixed-length buffer and potentially execute arbitrary code or crash the J...

CVE-2026-18249 IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses...

EUVD-2026-58468

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses...

CVE-2026-18249

IBM i 7.3–7.6 is vulnerable to privilege escalation via improper pointer validation from Java-controlled addresses (CWE-269), requiring a remote authenticated attacker with low privileges. IBM provides PTFs for all affected releases (e.g., SJ11037 for 7.6); no workarounds are available. No exploi...

CVE-2026-18193

CVE-2026-18193 affects IBM i versions 7.3, 7.4, 7.5, and 7.6, specifically the IBM SDK Java Technology Edition and IBM Runtime Environment Java components. The root cause is improper validation of user-controlled addresses (CWE-269: Improper Privilege Management), allowing a remote attacker to by...

CVE-2026-18193 IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of user-controlled addresses...

CVE-2026-18086 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to improper bounds checking...

CVE-2026-18086 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to improper bounds checking...

CVE-2026-18086

IBM i 7.3–7.6 is affected by CVE-2026-18086 in Java Secure Sockets Extension where improper bounds checking could allow a local attacker to execute arbitrary code or cause a denial of service. The NVD/NVD IBM bulletin describe the root cause as bounds-checking issues in JSSE, with a base CVSS v3....

CVE-2026-18068

CVE-2026-18068 affects IBM i versions 7.3, 7.4, 7.5, and 7.6 and relates to the Java Secure Sockets Extension (JSSE). The root cause is a byte-count and element-count confusion that could allow a remote attacker to obtain sensitive information. The vulnerability is reported with a moderate base s...

CVE-2026-18068 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion...

CVE-2026-17476 IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...