26870 matches found
GO-2025-4108 vulnerabilities
Vulnerabilities for packages: headlamp, docker-cli-buildx, melange, helm-mapkubeapis, nerdctl, ctop, flux-helm-controller, opa, osv-scanner, eksctl, falco-no-driver, zot, helm, helm-set-status, helm-operator, k8ssandra-client, gogatekeeper, cluster-api-helm-controller, kargo, rancher-fleet, trivy...
GO-2026-5475 vulnerabilities
Vulnerabilities for packages: headlamp, teleport, linkerd2, docker-cli-buildx, helm-mapkubeapis, ctop, kube-arangodb, eksctl, falco-no-driver, gatekeeper, datadog-agent, zot, helm, helm-set-status, helm-operator, scorecard, k8ssandra-client, kargo, cluster-api-helm-controller, trivy, k3s,...
GO-2026-5879 vulnerabilities
Vulnerabilities for packages: headlamp, maru, teleport, linkerd2, helm-mapkubeapis, vcluster, gitness, kube-arangodb, oras, eksctl, argocd-image-updater, gatekeeper, helm, helm-set-status, helm-operator, argo-cd, gogatekeeper, cluster-api-helm-controller, kargo, rancher-fleet, kyverno-notation-aw...
GO-2026-5884 vulnerabilities
Vulnerabilities for packages: headlamp, maru, teleport, linkerd2, helm-mapkubeapis, vcluster, gitness, kube-arangodb, oras, eksctl, argocd-image-updater, gatekeeper, helm, helm-set-status, helm-operator, argo-cd, k8ssandra-client, gogatekeeper, cluster-api-helm-controller, kargo, rancher-fleet,...
GO-2026-4342 vulnerabilities
Vulnerabilities for packages: headlamp, vale, nerdctl, kubernetes-dashboard-api, newrelic-fluent-bit-output, telegraf, bom, terraform-provider-pagerduty, gitness, mc, osv-scanner, flux-notification-controller, eksctl, falco-no-driver, spire-server, external-dns, aws-flb-kinesis,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nova, nri-consul, dgraph, kuberlr, envconsul, eksctl, kor, rancher-system-agent, kapp, helm-set-status, terraform-mcp-server, wal-g, k3s, step-kms-plugin, conftest, gobuster, libnvidia-container, harbor-cli, aws-eks-pod-identity-agent, ipfs-cluster, k3d, wire-go,...
CVE-2026-19884: Inclusion of Functionality from Untrusted Control Sphere
In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first. This affects applications built on Theia that include the git integration, such as the Theia IDE. Both Theia's own @theia/git extension an...
The vulnerability of the Linux operating system’s kernel, related to insufficient checking of the status of shared resources, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to insufficient checks on the status of resources that are shared among users. Exploiting this vulnerability can allow an attacker to cause service failures...
USTP-Secure — Updated!
USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-73623 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-73623 Source advisory: OSV:PYSEC-2026-3952...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-73625 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-73625 Source advisory: OSV:PYSEC-2026-3953...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-73622 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-73622 Source advisory: OSV:PYSEC-2026-3951...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-73620 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-73620 Source advisory: OSV:PYSEC-2026-3949...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-73621 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-73621 Source advisory: OSV:PYSEC-2026-3950...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-73624 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-73624 Source advisory: OSV:PYSEC-2026-3995...
dcos (>=0.1.1, <=0.4.10), dcoscli (>=0.1.1, <=0.4.10) +5 more potentially affected by CVE-2026-73619 via gitpython (1.0.2)
gitpython PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - dcos =0.1.1, =0.1.1, =1.2.0, =0.1.0, =1.0.1, =24.0.0, =24.3.1, =25.0.2 Source cves: CVE-2026-73619 Source advisory: OSV:PYSEC-2026-3948...
CVE-2026-13328
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
EUVD-2026-57724
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...
CVE-2026-13328
The Food Menu WordPress plugin (versions before 6.0.2 ) is vulnerable to an unauthenticated reservation status modification flaw. The plugin fails to perform necessary capability or ownership checks on its reservation-status update action. Because this action is exposed to unauthenticated users a...
CVE-2026-13328
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...