GO-2024-2718 vulnerabilities

Vulnerabilities for packages: falcoctl, kubescape, skaffold, gitsign, wolfictl, slsa-verifier, spire-server-fips, zarf, ko, goreleaser, melange, ko-fips, falcoctl-fips, apko, policy-controller-fips, tekton-chains-fips, vexctl, tkn, aactl, flux-source-controller, chainctl,...

GO-2025-3841 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2025-3416 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3605 vulnerabilities

Vulnerabilities for packages: filebrowser, kots...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: spqr, kubevela, steampipe, cilium-cli, fulcio, aws-flb-cloudwatch, witness, step-issuer, kwok, pdfcpu, litestream, envoy-gateway, nri-cassandra, sonobuoy, flux-kustomize-controller, thanos-operator, rootlesskit, opensearch-k8s-operator, newrelic-infra-operator,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: cerbos, terragrunt, kargo, pulumi-language-dotnet, skaffold, act, bom, nuclei, rancher-fleet, flux, trivy-operator, gomplate, kyverno, gitaly, syft, nfpm, grafana-alloy, pulumi-language-java, kubevela, trufflehog, k9s, dagger, scorecard, melange, src-fingerprint,...

MINI-MR2J-V2PG-JFMC

Bulletin has no description...

MINI-2QW5-VR2G-4Q26

Bulletin has no description...

Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix...

CVE-2026-27544

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

MINI-64WC-C7C3-9888

Bulletin has no description...

MINI-G4PP-H85F-P45W

Bulletin has no description...

CLEANSTART-2026-GY63167 Security fixes in thingsboard 4.3.1.3-r1

Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-SE70344 Security fixes in thingsboard 4.2.2.3-r1

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1

Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-SK52724 Security fixes in cosign 3.1.2-r1

Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...

CLEANSTART-2026-CB76425 Security fixes in consul-k8s 2.0.1-r1

Package consul-k8s version 2.0.1-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-50151, CVE-2026-50162...

ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root

Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by sequenceX0 in WordPress Plugin SAML SP Single Sign On versions = 5.4.3...