GO-2024-2599 vulnerabilities

Vulnerabilities for packages: mockery, cortex, hello-world-golang, k3s, kube-rbac-proxy, kubernetes-dns-node-cache, ctop, docker-cli, secrets-store-csi-driver-provider-gcp, render-template, kpt, kind, php-fpmexporter, sbom-scorecard, wazero, nri-mssql, speedtest-go, yam, nri-prometheus,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: cortex, victoriametrics, k3s, go, secrets-store-csi-driver-provider-gcp, helm-docs, k8s-device-plugin, hivemind, amazon-cloudwatch-agent, buildah, sftpgo, trino, kpt, harbor-scanner-trivy, tw, mc, speedtest-go, nri-prometheus, influx, licenseclassifier, datadog-agent...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: aactl, cortex, ctop, oras, docker-cli, dgraph, render-template, gops, protoc-gen-go-grpc, go-bindata, aws-flb-kinesis, metrics-server, grpcurl, kind, sbom-scorecard, cni-plugins, cass-operator, influx, helm-push, go-licenses, sonobuoy, aws-flb-cloudwatch, k3d,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3s, docker-cli, render-template, mockgen, kpt, kind, harbor-registry, step-kms-plugin, pluto, aws-otel-collector, k3d, docker-cli-buildx, src, ratify, dex, gobuster, kubernetes-dashboard-auth, guac, conftest, amazon-cloudwatch-agent-operator, gobump, ini-file,...

SUSE CVE-2026-73433

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

SUSE CVE-2026-73434

A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : gstreamer1-plugins-bad-free (RHSA-2026:54752)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54752 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. ...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2026-73532

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...

SUSE CVE-2026-18649

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:54660)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54660 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

RHEL 8 : gstreamer1-plugins-bad-free (RHSA-2026:54664)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54664 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

Alibaba Cloud Linux 3 : 0253: gstreamer1-plugins-bad-free (ALINUX3-SA-2026:0253)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0253 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-59691: A heap buffer overflow...

RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:54659)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54659 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:54658)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54658 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

PT-2026-71689

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a require once directive added to fluentformpro.php...

@rse/claudex (>=0.9.22, <=1.0.10), @snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1) +6 more potentially affected by CVE-2026-73414 via shescape (>=2.1.0, <=2.1.12)

shescape NPM version =2.1.0, =0.9.22, =2.6.0, =2.0.0, =8.0.0, =6.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-73414 Source advisory: SNYK:JS-SHESCAPE-18752073...