GO-2026-5594 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-notation-aws...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, flux, flux-source-controller...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: tfsec, conftest, policy-controller, kots, spire-server, trivy, witness, cosign, kyverno-notation-aws...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, zarf, trivy, cosign, buildkitd, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, trivy-operator, kubescape, gitsign, flux-source-controller, policy-controller, tkn, skaffold, goreleaser, teleport, kyverno-notation-aws, ko,...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: buildah, undock, gitsign, flux-source-controller, falcoctl, kots, slsa-verifier, tekton-chains, kyverno, ratify, zarf, kubescape, witness, skopeo, aactl, kyverno-notation-aws, podman...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: zot, policy-controller, slsa-verifier, crossplane, trivy-operator, kyverno, ratify, trivy, teleport, kubescape, aactl, kyverno-notation-aws...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: kyverno, ratify, zarf, slsa-verifier, falcoctl, neuvector-sigstore-interface, tekton-chains, trivy-operator, kubescape, gitsign, tkn, policy-controller, crossplane, goreleaser, teleport, aactl, kyverno-notation-aws, ko, tflint, spire-server...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, ratify, zarf, cosign, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, kubescape, gitsign, flux-source-controller, policy-controller, tkn, skaffold, goreleaser, teleport, aactl, kyverno-notation-aws, ko, tflint,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, dask-gateway, external-dns, nri-haproxy, kine, nri-couchbase, sbomqs, chisel, custom-pod-autoscaler, kapp, govulncheck, opencost, kserve-modelmesh-serving, crossplane-provider-sql, frp, src-fingerprint, vault-k8s, vault-secrets-webhook,...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: gitsign, flux-source-controller, falcoctl, policy-controller, tkn, zot, ratify, goreleaser, teleport, witness, aactl, kyverno-notation-aws...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, kyverno, ratify, zarf, trivy, cosign, slsa-verifier, buildkitd, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, trivy-operator, kubescape, gitsign, flux-source-controller, policy-controller, tkn, crossplane, skaffold,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: vexctl, sigstore-scaffolding, ratify, zarf, trivy, cosign, slsa-verifier, buildkitd, zot, falcoctl, neuvector-sigstore-interface, gh, tekton-chains, trivy-operator, kubescape, gitsign, flux-source-controller, policy-controller, tkn, rekor, skaffold, goreleaser,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wire-go, cerbos, nri-haproxy, rclone, kubernetes-csi-external-health-monitor, kapp, portieris, kapp-controller, undock, zot, falcoctl, polaris, hubble, kubernetes-dashboard-api, nginx-prometheus-exporter, wal-g, k8sgateway, lazydocker, nuclei, helm-operator, nodetain...

CVE-2022-4993 HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template

HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

CVE-2022-4993 HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template

HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

AZL-95798 CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

CVE-2026-72749

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields Set node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method pat...

EUVD-2026-56139

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields Set node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method pat...

CVE-2026-72749 n8n before 1.123.67 Prototype Pollution via Edit Fields

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields Set node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method pat...

PT-2026-70162

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields Set node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method pat...