GO-2024-3321 vulnerabilities

Vulnerabilities for packages: kine, sftpgo-plugin-pubsub, opentelemetry-collector-contrib-fips, kubernetes-dashboard-api-fips, crossplane-provider-aws-route53, terraform-provider-sendgrid-fips, harbor, snyk-cli, task, vexctl, go-discover, minio, kaniko, nginx-prometheus-exporter-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k3d, grpc-health-probe, kubernetes-csi-external-provisioner, step, zarf, cert-manager-cmctl, kwok, certificate-transparency, terragrunt, terraform-provider-google, guac, terraform-docs, spicedb, cloudnative-pg, spire-server, spegel, melange, sigstore-scaffolding,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: zarf, crossplane, flux, guac, pulumi, bom, chezmoi, goreleaser, pulumi-kubernetes-operator, kubevela, flux-source-controller, snyk-cli, wolfictl, melange, pulumi-language-java, kargo, syft, grafana-alloy, task, flux-image-automation-controller, kubescape, k8sgpt,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: rancher-agent, zarf, cert-manager-cmctl, cluster-api-helm-controller, helm-operator, steampipe, rancher-helm, tw, xeol, gogatekeeper, gatekeeper, kargo, k8ssandra-client, falcoctl, cilium-cli, chartmuseum, kyverno-notation-aws, rancher, maru, helm-mapkubeapis,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: zarf, crossplane, flux, guac, pulumi, bom, chezmoi, goreleaser, pulumi-kubernetes-operator, kubevela, flux-source-controller, snyk-cli, wolfictl, melange, pulumi-language-java, kargo, syft, grafana-alloy, task, flux-image-automation-controller, kubescape, k8sgpt,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: zarf, crossplane, flux, steampipe, guac, pulumi, bom, chezmoi, teleport, pulumi-kubernetes-operator, kubevela, flux-source-controller, snyk-cli, wolfictl, xeol, melange, pulumi-language-java, gitlab-runner, kargo, grafana-alloy, syft, nfpm,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cluster-api, nfs-subdir-external-provisioner, nri-prometheus, kubernetes, kube-vip, prometheus, nova, docker-cli-buildx, kubeflow-katib, terragrunt, harbor, knative-serving, nri-kubernetes, kiali, victoriametrics-cluster, kube-bench, telegraf, cilium, chisel, polaris...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: aactl, pulumi-language-java...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: prometheus, kubernetes, step, docker-cli-buildx, crossplane-provider-keycloak, cloudflared, knative-serving, telegraf, cilium, chisel, gitlab-kas, flux-source-controller, pulumi-language-java, gitlab-runner, flux-image-automation-controller, traefik,...

MINI-6WP6-V2RR-JQHM

Bulletin has no description...

CVE-2026-67201

A flaw was found in V, specifically within its net.urllib and net.http components. This vulnerability allows a remote attacker to bypass host-based allowlists by exploiting a difference in how URLs are parsed. By crafting a malicious URL with a backslash, an attacker can trick the system into...

CVE-2026-18235

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-18235

IBM i is affected by CVE-2026-18235 in Navigator for i. Description: remote authenticated attacker could execute arbitrary Control Language commands due to insufficient input validation. Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. CVSS v3.1 base score 8.3 (HIGH) with network attack vect...

EUVD-2026-57363

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-18235

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

CVE-2026-18235 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...

PT-2026-71166

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Insufficient input validation allows a remote authenticated attacker to execute arbitrary Control Language commands. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-73232

CVE-2026-73232 affects ffuf (Go) prior to 2.2.0. The vulnerability arises when a malicious server uses HTTP responses with compressed content: the guard in pkg/runner/simple.go checks only Content-Length, while io.ReadAll can read gzip, brotli, deflate, or chunked bodies without a decompressed-si...

CVE-2026-73232 ffuf denial of service (OOM) via HTTP response decompression bomb

ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...

CVE-2026-72742

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...