GO-2025-4008 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops, flux-kustomize-controller, age, ksops, litestream, chezmoi...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: aactl, docker-machine-driver-harvester, pulumi, falcoctl, k3s, act, eksctl, gh, kine, prometheus, opentofu, cilium, crossplane-provider-azure-sql, zarf, openbao, crossplane-provider-azure-storage, slsa-verifier, terragrunt, datadog-agent, helm, buildkitd,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: sqlexporter, aactl, flux-kustomize-controller, minio, mattermost, timestamp-authority, ratify, trufflehog, k3s, mariadb-operator, kine, kyverno-policy-reporter, step, sops, amass, step-issuer, seaweedfs, kubeflow-pipelines, spire-server, sftpgo-plugin-eventstore,...

Meta ordered to pay $942 million over harm to children

A New Mexico court has ordered Meta to pay a total of $942 million after finding that Facebook and Instagram harmed young users and that the company misled consumers about the safety of its platforms. Reportedly, the decision combines a $375 million civil-penalty verdict from March with a newly...

EUVD-2026-44917

HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include...

EUVD-2026-43994

Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network...

CVE-2026-50663

Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network...

CVE-2026-50663

CVE-2026-50663 affects Age of Empires II: Definitive Edition. The vulnerability is a relative path traversal in the game that could allow an unauthorized attacker to execute code over the network. The current documents specify the impact as remote code execution with high severity (CVSS 3.1: AV:N...

CVE-2026-50663 Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability

...

CVE-2026-50663 Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability

...

CVE-2026-50663

Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network...

Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability

Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network...

PT-2026-58211

Name of the Vulnerable Software and Affected Versions Age of Empires II: Definitive Edition affected versions not specified Description A relative path traversal issue allows an unauthorized attacker to achieve remote code execution over a network. The attack occurs when a user joins an...

KLA91149 Multiple vulnerabilities in Microsoft Copilot Plugin

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in GitHub Copilot...

CVE-2026-56664

ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validation in internal/idp/providers/jwt/session.go skips the maximum token age freshness check when an incoming token omits the iat claim, allowing arbitrarily old tokens...

CVE-2026-56664 ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider

ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validation in internal/idp/providers/jwt/session.go skips the maximum token age freshness check when an incoming token omits the iat claim, allowing arbitrarily old tokens...

CVE-2026-56664 ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider

ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validation in internal/idp/providers/jwt/session.go skips the maximum token age freshness check when an incoming token omits the iat claim, allowing arbitrarily old tokens...

EUVD-2026-42962

ZITADEL is an open source identity management platform. Prior to 3.4.12 and 4.15.2, ZITADEL's external JWT Identity Provider validation in internal/idp/providers/jwt/session.go skips the maximum token age freshness check when an incoming token omits the iat claim, allowing arbitrarily old tokens...