6448 matches found
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7
CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...
CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5
CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5. A patched version of the package is available...
CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16
CVE-2026-56852 affecting package docker-buildx for versions less than 0.14.0-16. A patched version of the package is available...
CVE-2026-66034 affecting package libssh2 for versions less than 1.11.1-5
CVE-2026-66034 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6. A patched version of the package is available...
CVE-2026-56852 affecting package dcos-cli for versions less than 1.2.0-22
CVE-2026-56852 affecting package dcos-cli for versions less than 1.2.0-22. A patched version of the package is available...
CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7
CVE-2026-56852 affecting package containerized-data-importer for versions less than 1.62.0-7. A patched version of the package is available...
CVE-2026-66032 affecting package libssh2 for versions less than 1.11.1-5
CVE-2026-66032 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...
CVE-2026-56852 affecting package opa for versions less than 0.63.0-5
CVE-2026-56852 affecting package opa for versions less than 0.63.0-5. A patched version of the package is available...
CVE-2026-56852 affecting package jx for versions less than 3.10.182-5
CVE-2026-56852 affecting package jx for versions less than 3.10.182-5. A patched version of the package is available...
CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-10
CVE-2026-56852 affecting package cert-manager for versions less than 1.12.15-10. A patched version of the package is available...
CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7
CVE-2026-56852 affecting package azcopy for versions less than 10.25.1-7. A patched version of the package is available...
Exploit for CVE-2026-52832
CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard...
CVE-2026-47768 nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...
CVE-2026-47726 nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/api/audit.go:12 — handleGetAuditLog does no admin check. The route is bearer-auth gated only; any operator API key returns the full audit log via store.ListAuditEntries up to...
CVE-2026-47726 nebula-mesh: GET /api/v1/audit-log discloses all entries to any operator
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/api/audit.go:12 — handleGetAuditLog does no admin check. The route is bearer-auth gated only; any operator API key returns the full audit log via store.ListAuditEntries up to...
CVE-2026-48025
CVE-2026-48025 (nebula-mesh) describes a memory-safety issue in versions prior to 0.3.7 where decrypted CA private keys (ed25519.PrivateKey) are constructed and stored in memory by the CAManager and not wiped after use. The problem arises when internal/pki/resolver.go constructs CAManager with th...
@wakaru/cli arbitrary file write during bundle unpack
Impact @wakaru/cli is vulnerable to arbitrary file write when unpacking a crafted JavaScript bundle with --unpack. Bundle-controlled module filenames were sanitized before writing extracted modules to the output directory. A crafted filename containing overlapping path traversal characters, such ...
GHSA-4J38-RW27-97GX org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
Impact It's possible to forge a request to delete a message. Patches The problem has been patched in version 2.0-rc-1 of Discussion Extension. Workarounds There's no easy workaround except upgrading. References https://jira.xwiki.org/browse/DISCUSSION-22 For more information If you have any...