GO-2026-6278 vulnerabilities

Vulnerabilities for packages: etcd, kubernetes, guac, aws-node-termination-handler, juicefs-csi-driver, infinispan-operator, cloudflared, amazon-cloudwatch-agent, op-geth, redis-operator, jitsucom-bulker, rancher-telemetry, verticadb-operator, kubevela, emissary...

CLSA-2026-1787675020 TuxCare security update for 30 packages (3 CVEs)

TuxCare rebuilt 30 packages to address 3 CVEs. Fixed in 7.0.70-tuxcare.1...

CLSA-2026-1787663916 TuxCare security update for 14 packages (2 CVEs)

TuxCare rebuilt 14 packages to address 2 CVEs. Fixed in 13.5.11-tuxcare.16...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, saf, kibana, wazuh-dashboard-fips, kubeflow-centraldashboard, code-server, gitlab-rails-ce-fips, actions-runner, renovate, prism, haraka, pulumi, npm, sqlpad, wazuh-dashboard, gemini-cli, opensearch-dashboards-fips, lerna,...

GO-2026-5676 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, dkron-fips, q, kyverno-policy-reporter-ui, k8sgateway-fips, rke2-runtime, spegel-fips, ipfs-cluster, kyverno-policy-reporter-fips, coredns, mediamtx, kyverno-policy-reporter, syncthing, k3s, opentelemetry-operator-fips, teleport,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: terraform-provider-google, temporal-fips, restic, zot, kwok, cloudnative-pg, falcosidekick, terraform-docs, k8sgpt-operator, zarf, cloudnative-pg-fips, spire-server-fips, grpc-health-probe, kubernetes-csi-driver-hostpath, kargo, opentelemetry-collector-contrib, ksops...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: buildah, cluster-api-gcp-controller-fips, external-dns-fips, kube-vip, kube-arangodb-fips, nerdctl-fips, prometheus-postgres-exporter, crossplane-provider-azure-authorization, coredns, apko-fips, helm, seaweedfs-fips, cert-manager-fips, terraform-docs, juicefs,...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: k9s, grype, gitaly, crossplane-provider-family-aws-fips, omnictl-multiarch, terraform-provider-azurerm-fips, gitlab-runner-fips, gitlab-rails-ce, rclone, argocd-image-updater-fips, crossplane-provider-aws-ecr, reports-server, crossplane,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: ko-fips, tekton-chains, kubescape-server-fips, crossplane, kyverno, tkn-fips, cosign-fips, gh, trivy-fips, crossplane-fips, neuvector-sigstore-interface, jfrog-cli, zot, commercial-chainloop-backend, kubescape, chainctl, kyverno-notation-aws, policy-controller-fips,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: azcopy, cluster-api-gcp-controller-fips, external-dns-fips, kube-arangodb-fips, nerdctl-fips, mods, prometheus-postgres-exporter, apm-server-fips, vault-k8s, restic, vault-k8s-fips, cfssl, logstash-exporter-fips, helm, ratify, langfuse-fips, terraform-docs,...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: argo-cd, guac, external-secrets-operator, kyverno, gitaly, terragrunt, teleport...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, cloudflared, kubescape, rekor, cosign, gitsign, tkn, slsa-verifier, oauth2-proxy, kots, flux-source-controller, aactl, vexctl, tekton-chains, argo-workflows, sops, fulcio, dex, terragrunt, spire-server...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: gitea, crossplane-provider-aws-elasticache, datadog-agent, crossplane-provider-aws-sns, kubescape, kubevela, crossplane-provider-aws-route53, flux-helm-controller, flux-notification-controller, crossplane-provider-aws-rds, gptscript, syft,...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: hcloud, frp, go-md2man, oras, fq, slsa-verifier, gcsfuse, local-static-provisioner, velero-plugin-for-csi, docker-credential-ecr-login, helm, cloud-provider-aws, q, metrics-server, nri-rabbitmq, temporal-server, sftpgo-plugin-geoipfilter, cert-manager-cmctl, nri-ngin...

Supporting Intel(R) SGX on Multi-Package Platforms

Intelr Software Guard Extensions SGX was originally released on client platforms and later extended to single socket server platforms. As developers have become familiar with the capabilities of the technology, the applicability of this capability in the cloud has been tested. Various Cloud Servi...

adclaw (>=1.0.0, <=1.0.33), agentjet (0.0.1) +47 more potentially affected by CVE-2024-8556 via agentscope (>=0.1.0, <=2.0.7.post1)

agentscope PYPI version =0.1.0, =1.0.0, =0.3.0, =0.1.0, =0.2.0, =0.1.5, =2.1.0, =1.0.0.post2, =0.1.0b1, =0.1.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-8556 Source advisory: SNYK:PYTHON-AGENTSCOPE-9511154...

Malicious code in url-multi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5715c2f7477bfb9fb101c5486a17aa63e012dfc2bf9cb4e8c54bf6b1879e1eba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...