GO-2024-2472 vulnerabilities

Vulnerabilities for packages: xeol-fips, xeol...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: melange, pombump...

GO-2024-2912 vulnerabilities

Vulnerabilities for packages: dive...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: lychee, zizmor, zola, qdrant, wasmcloud, wash, xh, rustls-ffi, rustup, uv, samply, tealdeer, linkerd-extension-init, fnm, pixi, oranda, sccache, wadm, sqlx, zed, kdash, ntpd-rs, ztunnel, rye, shadowsocks-rust, nushell, cargo-audit, wasm-pack, buck2, ztunnel-fips,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: rclone-fips, gke-gcloud-auth-plugin, node-problem-detector-fips, crossplane-provider-azure-managedidentity, protoc-gen-go-grpc, cert-manager-webhook-pdns, modelmesh-runtime-adapter, prometheus-nats-exporter, terraform-provider-azapi-fips,...

GO-2024-2472 vulnerabilities

Vulnerabilities for packages: xeol...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: keda, opentelemetry-collector, opentelemetry-operator, minio-operator, karma, amazon-cloudwatch-agent-operator, datadog-agent, jaeger, opentelemetry-collector-contrib, istio, metrics-server, k8sgpt, minio-object-browser, splunk-otel-collector, telegraf,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: helm-set-status, timestamp-authority, litefs, timescaledb-tune, yunikorn-web, dask-gateway, crossplane, direnv, velero-plugin-for-microsoft-azure, envconsul, atlantis, configmap-reload, argo-rollouts, terraform-provider-azapi, kubernetes-csi-external-health-monitor,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: bom, crossplane, act, steampipe, gomplate, nuclei, argocd-image-updater, syft, kubescape, wolfictl, grafana-alloy, guac, kargo, argo-cd, flux-source-controller, flux, grype, k9s, melange, argo-workflows, snyk-cli, cerbos, gitlab-runner, src-fingerprint, nfpm, zarf,...

DataEase <= 2.4.1 - Sensitive Information Exposure

DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the /de2api/engine/getEngine;.js path via a browser reveals that the platform's database configuration is returned. id: CVE-2024-30269...

CVE-2026-72638

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

CVE-2026-72667

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...

Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-119)

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request...

CVE-2026-59506

creationtimestamp| type| source ---|---|--- 2026-08-13 10:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxga4sidz2b 2026-08-13 10:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cyg2ac6dbgsu5 2026-08-13 12:00:26+00:00| seen|...

EUVD-2026-57769

CWE-203: Observable Discrepancy...

PT-2026-71756

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

UBUNTU-CVE-2026-48813

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...

CVE-2026-53414

creationtimestamp| type| source ---|---|--- 2026-08-12 15:11:56+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3msvg32kqka2h 2026-08-12 23:07:05+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mswamngs2k2w 2026-08-14 14:24:46+00:00| seen|...

CVE-2026-19559

creationtimestamp| type| source ---|---|--- 2026-08-12 12:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msv4r2uhci23 2026-08-12 16:45:05+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-67 2026-08-13 09:48:26+00:00| seen|...

CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment,...