GO-2023-1700 vulnerabilities

Vulnerabilities for packages: bom, helm, ctop, ko, melange, apko, up...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: bom, helm, ctop, ko, melange, apko, up...

GO-2023-2048 vulnerabilities

Vulnerabilities for packages: up, k3s, ctop...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-helm-controller, up, kubevela, k9s, zot, helm-push, eksctl, cilium-cli, k8sgpt, kubescape, kots, helm-operator, trivy, chartmuseum, zarf...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-helm-controller, up, kubevela, k9s, zot, helm-push, eksctl, cilium-cli, k8sgpt, kubescape, kots, helm-operator, trivy, chartmuseum, zarf...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, kubevela, k8sgpt, cilium-cli, grype, kaniko, gitness, helm, buildkitd, melange, flux-source-controller, up, helm-push, eksctl, trivy, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, zot, skaffold, kubescape, kots, ctop, k3d...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: buildkitd, up, kubevela, prometheus-adapter, kubernetes, caddy, k3s...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: up, melange, ctop, bom, apko, ko, helm...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: up, melange, ctop, bom, apko, ko, helm...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: up, melange, ctop, bom, apko, ko, helm...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: hugo, grafana-agent-operator, bank-vaults, flux-image-reflector-controller, terragrunt, k8sgpt, tkn, sops, flux, timestamp-authority, guac, cosign, velero, cortex, buildkitd, boring-registry, nuclei, rclone, goreleaser, sqlpad, step-ca, falcoctl, fulcio, ksops,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: syft, tkn, cilium-cli, dagger, grype, crossplane, kaniko, buildkitd, melange, docker-compose, buf, conftest, spire-server, up, kargo, cadvisor, ko, trivy, wolfictl, zot, kubescape, aactl, ctop...

CVE-2026-61967

Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...

DEBIAN-CVE-2026-73620

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout and TagReference.create, allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band...

WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by VanTastic in WordPress Plugin WP Event SOlution versions = 4.1.18...

CVE-2026-16538

The Wallet for WooCommerce (also known as TeraWallet ) WordPress plugin in versions before 1.6.10 is vulnerable to a wallet balance inflation flaw. The root cause is a failure to verify the actual amount collected during a wallet top-up before crediting the account. This allows customers to top u...

CVE-2026-16538 TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

CVE-2026-16538: Improper Access Control

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...

CVE-2026-68396

In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsischeduleeh Drivers which use the scsischeduleeh function to run the error handler currently risk the error handler thread never waking once all commands are timed out or inactive. There...

CVE-2026-68334

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix iothread race in rxrpcwakeupiothread rxrpcwakeupiothread checks local-iothread before waking it, but then reloads the pointer for wakeupprocess. local-iothread is cleared with WRITEONCE when the I/O thread exits, so th...