GO-2025-3699 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, neuvector-fips, neuvector, neuvector-scanner, docker-compose...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: gitlab-operator, tigera-operator-fips, gitlab-operator-fips, datadog-agent, datadog-agent-fips, tigera-operator...

GO-2026-5052 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips, crossplane-provider-azure-portal, crossplane-provider-azure-resources, nfpm, crossplane-provider-azure-network, external-secrets-operator-fips, goreleaser, crossplane-provider-azure-policyinsights, x509-certificate-exporter,...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: gitlab-cng, neuvector-sigstore-interface-fips, zitadel, kyverno-notation-aws-fips, kyverno, gitlab-cng-fips, bank-vaults, tkn-fips, beats, docker-compose-fips, jitsucom-bulker, grafana, istio-fips, boring-registry-fips, ratify-fips, beats-fips, k9s-fips, pluto-fips,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: teleport, chartmuseum, envoy-gateway, kyverno-notation-aws, helm-exporter-fips, kyverno, argo-cd, helm-mapkubeapis, helm-push, eksctl, trivy-operator, maru, chaos-mesh-fips, tw, kube-arangodb-fips, headlamp-fips, drone-fips, ratify, cloudbeat-fips, rancher-fleet,...

GO-2024-2748 vulnerabilities

Vulnerabilities for packages: slsa-verifier, kubevela, kwok, velero-fips, tekton-chains, src, eksctl, kine, azure-aad-pod-identity-mic, falcosidekick-fips, prometheus-operator-fips, kubernetes-dashboard-metrics-scraper, nri-discovery-kubernetes, spire-server-fips, karpenter-fips, kube-bench-fips,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, crossplane-provider-aws-codecommit, apiserver-network-proxy, crossplane-provider-azure-portal, crossplane-provider-aws-fis, crossplane-provider-terraform-fips, k8s-metacollector-fips, crossplane-provider-aws-mq-fips,...

GO-2026-5506 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-portal, gitlab-cng, crossplane-provider-aws-sns, haproxy-ingress-fips, aws-privateca-issuer-fips, crossplane-provider-aws-ecs-fips, crossplane-provider-azure-servicelinker, crossplane-provider-aws-cloudwatchlogs, dataplaneapi-fips,...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: zot, kots, gitness, argocd-image-updater, envoy-gateway, portieris...

GO-2025-3373 vulnerabilities

Vulnerabilities for packages: spire-server, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, vault-benchmark, aws-load-balancer-controller, vault-k8s, kapp, kube-metrics-adapter, nats, overmind, bom, trust-manager, kustomize, pdfcpu, flannel, harbor-registry, trillian,...

Companion Sitemap Generator < 4.5.3 - Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-1780 info: name: Companion Sitemap Generator 4.5.3 - Cross-Site Scripting author:...

Linux Distros Unpatched Vulnerability : CVE-2026-68126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: hold an interface reference across the scan worker mac802154scanworker captures the scanning sub-interface under RCU and then keeps dereferencing...

CVE-2026-68412

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. This vulnerability, located in the cfg80211wextsiwscan function, can lead to a memory leak. A local attacker could exploit this by sending a crafted Wi-Fi scan request with an Extended Service Set...

PT-2026-70127

Name of the Vulnerable Software and Affected Versions Dub versions prior to 2026-07-10 Description An unauthenticated remote attacker can induce the server to issue HTTP requests to arbitrary internal or external hosts. This occurs via the 'metatags edge' endpoint, which fetches any caller-suppli...

GHSA-H443-HX93-M7QC vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-68414

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...

CVE-2026-68412

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211wextsiwscan If the test against IEEE80211MAXSSIDLEN fails, then 'creq' leaks. Use the existing error handling path to fix it...

EUVD-2026-55600

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211schedscanresults can queue rdev-schedscanreswk from a driver result notification while a scheduled scan request is present. The work callback recovers the...