syncthing-2.1.5-1.1 on GA media (moderate)

syncthing-2.1.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11768-1 Rating: moderate Cross-References: CVE-2026-33814 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

PT-2026-90937

These are all security issues fixed in the syncthing-2.1.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11768-1 syncthing-2.1.5-1.1 on GA media

These are all security issues fixed in the syncthing-2.1.5-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 45 Update: syncthing-2.1.3-1.fc45

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

Fedora 45 : syncthing (2026-bd6debcfb6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-bd6debcfb6 advisory. 2.1.3, fix for CVE-2026-40898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

[SECURITY] Fedora 44 Update: syncthing-2.1.3-1.fc44

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

Fedora 44 : syncthing (2026-c33332bcf7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c33332bcf7 advisory. 2.1.3, fix for CVE-2026-40898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

ANT-2026-B324R0JY · syncthing/syncthing · auth_bypass

auth-bypass high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-B324R0JY: stdiscosrv trusts proxy header for client identity...

syncthing-2.1.0-1.1 on GA media (moderate)

syncthing-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10764-1 Rating: moderate Cross-References: CVE-2020-11022 CVSS scores: CVE-2020-11022 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2026:10764-1 syncthing-2.1.0-1.1 on GA media

These are all security issues fixed in the syncthing-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: minio-fips, gatekeeper, gatekeeper-fips, kube-arangodb-fips, loki, aactl, licenseclassifier, chezmoi, libnvidia-container-fips, nats, rancher-helm, backup-restore-operator-fips, dive, syft, vault-env, juicefs, trivy, jaeger-fips, kuma, rook-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: minio-fips, gatekeeper, gatekeeper-fips, kube-arangodb-fips, loki, aactl, licenseclassifier, chezmoi, libnvidia-container-fips, nats, rancher-helm, backup-restore-operator-fips, dive, syft, vault-env, juicefs, trivy, jaeger-fips, kuma, rook-fips,...

CVE-2025-64702 vulnerabilities

Vulnerabilities for packages: q, caddy, kubernetes-dns-node-cache, k8sgateway-fips, kargo, k8sgateway, coredns, kubo-fips, syncthing, eks-distro-fips, dkron, spegel, ipfs-cluster, kubo, k3s, ipfs-cluster-fips, dkron-fips, teleport, kubernetes-dns-node-cache-fips, traefik, syncthing-fips,...

GHSA-G754-HX8W-X2G6 vulnerabilities

Vulnerabilities for packages: q, caddy, kubernetes-dns-node-cache, k8sgateway-fips, kargo, k8sgateway, coredns, kubo-fips, syncthing, eks-distro-fips, dkron, spegel, ipfs-cluster, kubo, k3s, ipfs-cluster-fips, dkron-fips, teleport, kubernetes-dns-node-cache-fips, traefik, syncthing-fips,...

EUVD-2021-1226

Malware in sbrugna...

EUVD-2022-1945

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-21404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sendi...

Fedora: Security Advisory (FEDORA-2024-aa6e72c713)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

Linux Distros Unpatched Vulnerability : CVE-2022-46165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync maliciou...