PT-2026-72721

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif rxq cleanup unlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

CVE-2026-73683

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...

CVE-2026-73683

CVE-2026-73683 affects Laravel Socialite’s Facebook provider. The flaw allows unauthenticated attackers to replay captured OIDC id_tokens via a missing nonce validation in FacebookProvider.php’s getUserByOIDCToken(), so a valid, unexpired id_token for the same Facebook App ID can be submitted to ...

CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...

WordPress Amelia plugin < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR vulnerability

Provider+ Cross-Customer Appointment Data Disclosure via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Amelia versions 2.4.6...

GO-2025-3847 vulnerabilities

Vulnerabilities for packages: sftpgo, terraform-provider-acme-fips, traefik-fips, traefik, terraform-provider-acme...

GO-2023-1793 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver, vault-csi-provider...

GO-2026-5973 vulnerabilities

Vulnerabilities for packages: rke2-runtime, rke2-runtime-fips, rke2-cloud-provider, rke2-cloud-provider-fips...

GO-2022-1144 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow, terraform-provider-sendgrid, kubeflow-fips, terraform-provider-sendgrid-fips...

GO-2022-0236 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, grpcurl, k3d, hey, terraform-provider-sendgrid-fips...

GO-2021-0238 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, grpcurl, k3d, hey, terraform-provider-sendgrid-fips...

GO-2022-0969 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, dynamic-localpv-provisioner, kubeflow, wireguard-go, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, grpcurl, k3d, hey, kube-state-metrics, kubeflow-fips, terraform-provider-sendgrid-fips...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, dynamic-localpv-provisioner, kubeflow, wireguard-go, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, grpcurl, gke-gcloud-auth-plugin, k3d, hey, restic, kube-state-metrics, go, kubeflow-fips, terraform-provider-sendgrid-fips...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, k3d, hey, gitleaks, vt-cli, terraform-provider-sendgrid-fips...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, dynamic-localpv-provisioner, kubeflow, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, grpcurl, k3d, hey, kube-state-metrics, vt-cli, gitleaks, kubeflow-fips, terraform-provider-sendgrid-fips...

GO-2021-0356 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, k3d, kubeflow-fips, terraform-provider-sendgrid-fips...

GO-2022-0968 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, kubeflow, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, k3d, kubeflow-fips, terraform-provider-sendgrid-fips...

GO-2022-0493 vulnerabilities

Vulnerabilities for packages: kind, dynamic-localpv-provisioner, kubeflow, ctop, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, grpcurl, k3d, terraform-provider-sendgrid-fips...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: openfga-fips, kots, grafana-alloy-fips, hcloud, ko-fips, traefik, boring-registry-fips, nri-discovery-kubernetes, kubecolor, argo-workflows, docker-cli-buildx-fips, aws-otel-collector-fips, prometheus, traefik-fips, cosign-fips, docker-compose-fips, grafana, podinfo,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: logstash, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-firehose-fips, crossplane-provider-aws-wafv2, buildah-fips, argo-cd, terragrunt-fips, aws-flb-firehose-fips, kubescape-operator-fips, argo-workflows, crossplane-provider-aws-elasticache-fips,...