GO-2026-4832 vulnerabilities

Vulnerabilities for packages: nats-top, prometheus-nats-exporter-fips, kine, nats, rke2-runtime, nats-fips, prometheus-nats-exporter, rke2-runtime-fips, nats-top-fips, milvus, k3s, telegraf...

GO-2025-3600 vulnerabilities

Vulnerabilities for packages: nats-server, nats-top...

GO-2026-4533 vulnerabilities

Vulnerabilities for packages: telegraf, kine, nats-top, k3s...

GO-2026-4826 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4830 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4832 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4834 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4835 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4828 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4827 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4831 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4833 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4836 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4837 vulnerabilities

Vulnerabilities for packages: nats, telegraf, k3s, kine, nats-top...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: pvc-autoresizer, actions-runner-controller, cluster-api-ipam-provider-in-cluster, terraform-provider-time, openbao-k8s, kubo, extism, rabbitmq-cluster-operator, fluxcd-kustomize-mutating-webhook, kubernetes-csi-external-resizer, flux-image-automation-controller,...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

CVE-2026-16538 TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

CVE-2026-16538

The Wallet for WooCommerce (also known as TeraWallet ) WordPress plugin in versions before 1.6.10 is vulnerable to a wallet balance inflation flaw. The root cause is a failure to verify the actual amount collected during a wallet top-up before crediting the account. This allows customers to top u...

CVE-2026-16538: Improper Access Control

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

Malicious code in chai-as-deployer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4da130c2818dc609c23c93511a70a6c207cf19cdf9fdd937e369e07b5f1e492 The package is published as chai-as-deployer but its tarball contains verbatim pino README/docs/type-definitions while the advertised chai plugin is ...