CLEANSTART-2026-QN98167 html

Multiple security vulnerabilities affect the kube-state-metrics package. The html. See references for individual vulnerability details...

CLEANSTART-2026-WY13161 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the kube-state-metrics package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

ChatGPT, Is This Real? the Influence of Generative AI on Writing Style in Top-Tier Cybersecurity Papers

With the release of ChatGPT in 2022, generative AI has significantly lowered the cost of polishing and rewriting text. Due to its widespread usage, conference organizers instated specific requirements researchers need to adhere to when using GenAI. When asked to rewrite text, GenAI can introduce...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, cloudflared, cluster-api-ipam-provider-in-cluster, istio, kubescape, grype, docker, thanos, argocd-image-updater, distribution, cortex, terraform-provider-grafana, net-kourier, ratify, kubescape-operator, containerd, seaweedfs, velero,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: cloud-provider-azure, cloudflared, cluster-api-ipam-provider-in-cluster, istio, kubescape, grype, docker, thanos, argocd-image-updater, distribution, cortex, terraform-provider-grafana, net-kourier, ratify, kubescape-operator, containerd, seaweedfs, velero,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-cloudfront-fips, cluster-autoscaler, gitlab-rails-ce, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-secretsmanager-fips, omni-fips, dapr, amazon-eks-ami, flux-source-controller-fips, loki,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-cloudfront-fips, cluster-autoscaler, gitlab-rails-ce, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-secretsmanager-fips, omni-fips, dapr, amazon-eks-ami, flux-source-controller-fips, loki,...

GHSA-3CJC-VHFM-FFP2 Apache DolphinScheduler vulnerable to sensitive information disclosure

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler. This vulnerability may allow unauthorized actors to access sensitive information, including database credentials. This issue affects Apache DolphinScheduler versions 3.1.. Users are...

RLSA-2026:6388 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For...

Cybersecurity Metrics Every CISO Should Report to the Board

Cybersecurity Metrics Every CISO Should Report to the Board After twenty years of leading security teams and presenting to boards at companies like Tripwire and RiskIQ, I can tell you this: the metrics that matter to your SOC team are not the metrics that matter in the boardroom. Boards do not wa...

Risk-Based Vulnerability Management: The Complete Guide to Smarter Threat Prioritization

Your vulnerability scanner just flagged 12,000 findings. Your team has the bandwidth to remediate maybe 200 this sprint. Which ones do you fix first? If your answer is "sort by CVSS score and work down the list," you are making the same mistake most security teams make. You are treating a 9.8-rat...

UBUNTU-CVE-2026-39882

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is...

opentelemetry-go: OTLP HTTP exporters read unbounded HTTP response bodies

overview: this report shows that the otlp HTTP exporters traces/metrics/logs read the full HTTP response body into an in-memory bytes.Buffer without a size cap. this is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled or a network attacker can mitm t...

SUSE-SU-2026:1195-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 bsc1259816: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260265. Changelog: Collect WLM metric...

SUSE-SU-2026:1194-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 bsc1259816: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260265. Changelog: Collect WLM metric...

Benchmarking-Agent-Architectures

Benchmarking Agent Architectures for LLM-Based Exploit Gener...

CLEANSTART-2026-EJ93145 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames

Multiple security vulnerabilities affect the kube-state-metrics package. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. See references for individual vulnerability details...

CVE-2026-33533

A flaw was found in Glances, an open-source system monitoring tool. The Glances XML-RPC server, when activated, sends a wildcard Access-Control-Allow-Origin header and does not validate the Content-Type header. This allows a remote attacker to craft a malicious webpage that can issue a Cross-Orig...

CLEANSTART-2026-KK98885 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq applied in versions: 2.18.0-r0

Multiple security vulnerabilities affect the kube-state-metrics package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PS51260 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142 applied in versions: 1.2.2-r0, 1.2.2-r1

Multiple security vulnerabilities affect the kubernetes-dashboard-metrics-scraper package. These issues are resolved in later releases. See references for individual vulnerability details...