CVE-2026-55199 vulnerabilities

Vulnerabilities for packages: libssh2...

GHSA-WC69-RHJR-HC9G vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips...

CVE-2026-15127 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15121 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15123 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15124 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15128 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15118 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15107 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q66R-H3M9-74HH vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15116 vulnerabilities

Vulnerabilities for packages: chromium...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

GHSA-FPG8-7664-JC5Q vulnerabilities

Vulnerabilities for packages: dagdotdev...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: chartmuseum, helm-set-status, opa-envoy, vcluster, linkerd2, flux-source-controller, kube-arangodb, rancher-agent, trivy, tigera-operator, kyverno-notation-aws, rancher-fleet, opentofu, kyverno, gatekeeper, k9s, cilium-cli, flux-helm-controller, trivy-operator,...

SUSE CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: kube-vip, cilium-cli...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, open-webui...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, open-webui...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent, open-webui...

GHSA-HF52-78X8-6W3W vulnerabilities

Vulnerabilities for packages: apache-tomee, geoserver...