GHSA-5GJX-96WQ-C8R2 vulnerabilities

Vulnerabilities for packages: helm...

GO-2023-2071 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2068 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2069 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2072 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-1765 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, aactl...

GO-2025-3838 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2024-2907 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2024-2482 vulnerabilities

Vulnerabilities for packages: goreleaser...

GO-2026-5322 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2026-4474 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-4344 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2023-1574 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2024-2529 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2023-2072 vulnerabilities

Vulnerabilities for packages: croc...

CVE-2026-19157

A flaw was found in ANGLE, a component within Google Chrome on Android. This out-of-bounds write vulnerability allows a remote attacker to potentially perform a sandbox escape by enticing a user to visit a specially crafted HTML page. This could lead to an attacker executing arbitrary code outsid...

EUVD-2026-58501

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing...

EUVD-2026-58503

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers. Attackers with write permission on a table with a double-quote in its name can inject SQL that executes as the datasource's...