CVE-2026-55199 vulnerabilities

Vulnerabilities for packages: libssh2...

GHSA-WC69-RHJR-HC9G vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips...

CVE-2026-15121 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15124 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15123 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15127 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15128 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15107 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15118 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q66R-H3M9-74HH vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15116 vulnerabilities

Vulnerabilities for packages: chromium...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

GHSA-FPG8-7664-JC5Q vulnerabilities

Vulnerabilities for packages: dagdotdev...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: kots, k8ssandra-client, grafana-operator, ratify, opa-envoy, oras, zarf, steampipe, rancher, opa, chartmuseum, rancher-agent, headlamp, argocd-image-updater, zot, helm, linkerd2, consul-k8s, tigera-operator, trivy-operator, argo-cd, gatekeeper, trivy, conftest,...

SUSE CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: open-webui, datadog-agent, kubeflow-pipelines-visualization-server...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: open-webui, datadog-agent, kubeflow-pipelines-visualization-server...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: open-webui, datadog-agent, kubeflow-pipelines-visualization-server...

GHSA-HF52-78X8-6W3W vulnerabilities

Vulnerabilities for packages: apache-tomee, geoserver...