CVE-2025-71405

chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...

Open Redirect

Spring Security is vulnerable to Open Redirect. The vulnerability is due to CookieRequestCache and CookieServerRequestCache storing and using an unvalidated absolute URL from a browser cookie as the post-login redirect target, allowing an attacker to redirect users to a malicious destination...

GO-2024-2907 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-3604 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GO-2024-2576 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: zarf, grype, pulumi-language-java, flux-fips, snyk-cli, apko, nuclei, argo-events-fips, src-fingerprint, tfsec, trivy-fips, flux-image-automation-controller, kubevela, tekton-pipelines, go-licenses, nemo, gptscript, kaniko-fips, flux-source-controller-fips, kaniko,...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: reports-server, knative-kafka-broker, k3s, podman, commercial-expanso-edge, external-dns, keda-fips, frankenphp-8.3, gitlab-kas, terraform, external-secrets-operator-fips, kyverno-fips, grafana, etcd-fips, spire-server, omnictl-multiarch-fips, elastic-agent-fips,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: ko, cosign, zarf, kubescape-server, docker-cli-buildx, tekton-chains, sigstore-scaffolding-fips, ratify, cloudbeat, docker, falcoctl, falcoctl-fips, trivy-fips, neuvector-sigstore-interface, commercial-chainloop-backend, chainctl-fips, policy-controller-fips,...

GO-2026-5593 vulnerabilities

Vulnerabilities for packages: traefik, sftpgo...

GO-2022-0587 vulnerabilities

Vulnerabilities for packages: opa...

GO-2022-0574 vulnerabilities

Vulnerabilities for packages: opa...

GO-2026-4962 vulnerabilities

Vulnerabilities for packages: mattermost...

GO-2025-3565 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller...

GO-2025-3988 vulnerabilities

Vulnerabilities for packages: gitea, sftpgo...

GO-2024-2476 vulnerabilities

Vulnerabilities for packages: dex...

GO-2026-5029 vulnerabilities

Vulnerabilities for packages: step-issuer, gptscript, gitea, cilium, helm, kubernetes-dashboard, caddy, prometheus-operator, k3s, hydra, flux, fq, crossplane-provider-azure-storage, traefik, glab, falco-no-driver, kine, snyk-cli, mattermost, minio, ingress-nginx-controller,...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: go-licenses, scorecard, goreleaser, src-fingerprint, bom, gitness, pulumi-kubernetes-operator, gitsign, nuclei...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, spire-server, kpt, docker-credential-gcr, datadog-agent, nuclei, opentelemetry-operator, envoy-gateway, ko, osv-scanner, rancher, cri-tools, buildah, k8sgpt, trivy, zot, skopeo, grafana, undock, trivy-operator, kots, portieris, podma...

GO-2026-5336 vulnerabilities

Vulnerabilities for packages: argo-workflows, gptscript, gitea, gitlab-runner, k9s, trufflehog, bom, rancher-fleet, kargo, gitsign, nuclei, crossplane, pulumi, zarf, flux, syft, tfsec, xeol, kaniko, teleport, goreleaser, snyk-cli, act, grafana-alloy, dagger, apko, osv-scanner,...

OPENSUSE-SU-2026:21580-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...