GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, dgraph, docker-credential-acr-env, docker-credential-acr-env-fips...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, docker-credential-acr-env, dgraph...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: govulncheck, kubecolor, trillian, spqr, ctop, controller-gen, envconsul, gosu, rekor, tfsec, timescaledb-tune, conjur-cli, kubernetes-dashboard-web, kube-logging-operator-custom-runner, ipfs-cluster, kube-vip-cloud-provider, docker-machine-driver-harvester, cadvisor,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: govulncheck, kubecolor, trillian, spqr, ctop, controller-gen, envconsul, gosu, rekor, tfsec, timescaledb-tune, conjur-cli, kubernetes-dashboard-web, kube-logging-operator-custom-runner, ipfs-cluster, kube-vip-cloud-provider, docker-machine-driver-harvester, wazero,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: govulncheck, libnvidia-container, crossplane-provider-azure-storage, cilium, crossplane-provider-aws-kms, ctop, controller-gen, envconsul, nri-consul, spqr, step-ca, cluster-autoscaler, grafana-rollout-operator, rekor, aws-nuke, flannel, conjur-cli,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, crossplane-provider-azure-storage, trillian, cloudflared, step-ca, rekor, flux-helm-controller, melange, cadvisor, flux-kustomize-controller, wireguard-go, gomplate, k8sgpt, kots, nri-mssql, terraform-provider-aws, falcoctl, boring-registry,...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: govulncheck, libnvidia-container, kubecolor, trillian, spqr, ctop, helm-operator, cloudflared, step-ca, gosu, rekor, flannel, rclone, tfsec, ksops, melange, cadvisor, flux-kustomize-controller, dask-gateway, go, gomplate, petname, grpcurl, wireguard-go, k8sgpt,...

CVE-2026-53370

The CVE-2026-53370 issue affects the Linux kernel (perf/x86/intel) related to Auto Counter Reload (ACR) mask validation. Root cause: user-space ACR mask validation (attr.config2) could permit indices from other ACR groups; an invalid mask could cause an early return and skip subsequent groups; hw...

EUVD-2026-45440

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

CVE-2026-53370

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: perf/x86: Fixed the potential issue with bad containerof in intelpmuhwconfig. The auto counter reload may involve a group of events, some of which are software-related. The software event related to the PMU is not equivalent t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: perf/x86/intel: Fixed an access error when accessing the IA32PMCxCFGB MSRs When running perffuzzer on PTL, sometimes the “unchecked MSR access error” is observed when accessing the IA32PMCxCFGB MSRs. 55.611268 Unchecked MSR...

The game is over: when “free” comes at too high a price. What we know about RenEngine

We often describe cases of malware distribution under the guise of game cheats and pirated software. Sometimes such methods are used to spread complex malware that employs advanced techniques and sophisticated infection chains. In February 2026, researchers from Howler Cell announced the discover...

[SECURITY] Fedora 41 Update: xmedcon-0.25.3-1.fc41

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...

[SECURITY] Fedora 42 Update: xmedcon-0.25.3-1.fc42

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...

CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: govulncheck, envconsul, conjur-cli, kube-vip-cloud-provider, iptables-wrappers, petname, dataplaneapi, q, pulumi-kubernetes-operator, k8sgpt-operator, litefs, spark-operator, direnv, xcover, kube-state-metrics, helm-docs, slsa-verifier, velero-plugin-for-aws, traefik...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: govulncheck, kubecolor, trillian, spqr, ctop, controller-gen, envconsul, gosu, rekor, tfsec, timescaledb-tune, conjur-cli, kubernetes-dashboard-web, kube-logging-operator-custom-runner, ipfs-cluster, kube-vip-cloud-provider, docker-machine-driver-harvester, wazero,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: govulncheck, kubecolor, trillian, spqr, ctop, controller-gen, envconsul, gosu, rekor, tfsec, timescaledb-tune, conjur-cli, kubernetes-dashboard-web, kube-logging-operator-custom-runner, ipfs-cluster, kube-vip-cloud-provider, docker-machine-driver-harvester, wazero,...