143844 matches found
SUSE CVE-2026-50149
Contour is a Kubernetes ingress controller using Envoy proxy. In versions 1.23.0 through 1.33.4, when an HTTPProxy is configured with incompatible combination of both .spec.virtualhost.tls.enableFallbackCertificate: true and .spec.virtualhost.jwtProviders, Contour does not reject the configuratio...
SUSE CVE-2026-53487
Kite is a Kubernetes dashboard. Prior to version 0.12.3, authenticated Kite users with any role can request /api/v1/overview for a cluster that their roles do not permit by selecting that cluster with x-cluster-name. The overview route is registered before middleware.RBACMiddleware and GetOvervie...
SUSE CVE-2026-56443
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories - residual after CVE-2026-25714 / PR 37118...
CVE-2026-67427
creationtimestamp| type| source ---|---|--- 2026-07-30 16:35:12+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-hr7p-wg7r-hg9m 2026-07-30 23:32:08+00:00| seen| https://gist.github.com/alon710/937397e52a8e0970b2abb603a8f2aff3 2026-07-31...
CVE-2026-67425
creationtimestamp| type| source ---|---|--- 2026-07-30 16:35:10+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-qq9q-xgm3-xv9g 2026-07-30 22:32:21+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47 2026-07-31...
CVE-2026-54522
CVE-2026-54522 affects MessagePack for Ruby prior to 1.8.2, where MessagePack::Buffer#clear can leave internal rmem pointers stale after a chunk return, enabling a subsequent Buffer#write to alias the freed page and potentially disclose or corrupt cross-buffer data. Root cause: stale rmem_last/rm...
GHSA-PGWH-4JJ4-QM8V
creationtimestamp| type| source ---|---|--- 2026-07-30 16:30:59+00:00| seen| https://gist.github.com/alon710/abbfb678b2ea15b959183e89124a0f42...
CVE-2026-59326
creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:18+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759...
CVE-2026-59328
creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:15+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759...
CVE-2026-59327
creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759...
GHSA-XR9X-R78C-5HRM
creationtimestamp| type| source ---|---|--- 2026-07-30 11:36:36+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrudy2kgin2f 2026-07-30 13:34:04+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrukk3nzjy2o 2026-07-30 14:46:38+00:00| seen|...
GHSA-PC2W-4MQ8-32QW
creationtimestamp| type| source ---|---|--- 2026-07-30 11:31:05+00:00| seen| https://gist.github.com/alon710/fcc454540fcb39a9b7c00ee410e47a9e...
ROOT-APP-NPM-CVE-2026-55487 CVE-2026-55487 in @rootio/pnpm - Patched by Root
Root has patched CVE-2026-55487 in the @rootio/pnpm package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-QRV3-253H-G69C GHSA-qrv3-253h-g69c in @rootio/pnpm - Patched by Root
Root has patched GHSA-qrv3-253h-g69c in the @rootio/pnpm package for Root:npm. Multiple fixed versions available...
RHSA-2026:48603 Red Hat Security Advisory: hplip security update
Bulletin has no description...
RHSA-2026:48095 Red Hat Security Advisory: RHCS 10.8 bug fix and enhancement update
Bulletin has no description...
RHSA-2026:48034 Red Hat Security Advisory: nodejs24 security update
Bulletin has no description...
RHSA-2026:48033 Red Hat Security Advisory: nodejs22 security update
Bulletin has no description...