GHSA-J88V-2CHJ-QFWX vulnerabilities

Vulnerabilities for packages: grafana, falcosidekick, timescaledb-parallel-copy, temporal, sftpgo, amass, gitlab-kas, sftpgo-plugin-eventstore, steampipe, rke2-cloud-provider, kube-bench, kubeflow-pipelines, spire-server, telegraf, pgtimetable, wal-g, ferretdb, gitaly, spqr, keda, argo-workflows,...

EUVD-2026-12073

SFTPGo improperly sanitizes placeholders in group home directories/key prefixes...

PT-2024-35169 · Sftpgo · Sftpgo

Name of the Vulnerable Software and Affected Versions: SFTPGo versions prior to 2.6.3 Description: SFTPGo has a feature that allows the EventManager to execute scripts or run applications in response to certain events. However, any SFTPGo administrator with permission to run a script has access t...