21115 matches found
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, zot, buildkitd-fips, cosign, tflint, crossplane, docker-cli-buildx, slsa-verifier, chainctl, commercial-kyverno, kyverno, flux-source-controller-fips, kubescape, kyverno-notation-aws, goreleaser, jfrog-cli,...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2026-5029 vulnerabilities
Vulnerabilities for packages: fq, falco-no-driver, minio, crossplane-provider-aws-elasticache, glab, snyk-cli, istio, kyverno, external-secrets-operator, k3s, vale, ingress-nginx-controller, prometheus, step, kubernetes-dashboard, gitea, grafana-pyroscope, kine,...
GO-2024-2456 vulnerabilities
Vulnerabilities for packages: nuclei, bom, go-licenses, src-fingerprint, goreleaser, gitness, scorecard, pulumi-kubernetes-operator, gitsign...
GO-2026-5668 vulnerabilities
Vulnerabilities for packages: undock, grafana, trivy-operator, rancher-agent, buildah, trivy, nuclei, portieris, docker-credential-gcr, cri-tools, zot, envoy-gateway, opentelemetry-operator, rancher-machine, skopeo, aws-otel-collector, spire-server, datadog-agent, osv-scanner, kots,...
GO-2026-5336 vulnerabilities
Vulnerabilities for packages: apko, argo-workflows, trivy-operator, kaniko, syft, rancher-fleet, argo-events, pulumi-language-dotnet, snyk-cli, trufflehog, kyverno, argo-cd, external-secrets-operator, skaffold, trivy, witness, nuclei, kubescape, bom, cerbos, kargo, src-fingerprint, goreleaser,...
Workspace Topology As an Attack Vector in Agentic Coding Assistants
Agentic coding assistants are finding widespread use, not just in new code development but in quickly ingesting and leveraging third-party code. This opens up a risk of malicious code being ingested as these coding tools operate with broad filesystem access inside developer workspaces. In this...
dalfox v3.2.1
Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy. Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickl...
semgrep v1.173.0
Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...
CLEANSTART-2026-YY19713 Security fixes in keycloak 26.7.0-r1
Package keycloak version 26.7.0-r1 fixes 13 vulnerabilities: ghsa-rmj7-2vxq-3g9f, ghsa-j3rv-43j4-c7qm, ghsa-9fxm-vc8v-hj55, ghsa-5hh8-q8hv-fr38, ghsa-rcqc-6cw3-h962...
azurelinux v3.0.20260809-3.0
Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...
Linux Distros Unpatched Vulnerability : CVE-2026-19587
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. CVE-2026-19587 Note that Nessus relies on the presen...
EmailXpose β Updated!
EmailXpose AI-Powered Email Clarity EmailXpose is an open source AI system that analyzes emails to detect phishing, spam, scams, and malware while also interpreting contextual meaning across text, images, and video. It goes beyond traditional security tools by combining threat intelligence,...
GHSA-WP74-JGXH-GV4Q vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-47228 Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords
Admidio is an open-source user management solution. modules/registration.php mode sendlogin regenerates a random password for useruuidassigned, stores its bcrypt hash in admusers.usrpassword, and emails the cleartext to that user. Every other state-changing mode in the same file assignmember,...
ziti v1.5.17
OpenZiti OpenZiti is an open-source zero-trust networking platform that makes network services invisible to unauthorized users. Every connection, whether from a user, a service, a device, or a workload, is authenticated with cryptographic identity, authorized by policy, and encrypted end-to-end...
DEBIAN-CVE-2026-19588
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...
