CVE-2026-45725

A flaw was found in compliance-trestle. The library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher does not properly sanitize path traversal sequences ../ when constructing local cache file paths from URLs. A remote attacker can exploit this by referencing a malicious URL in an...

CVE-2026-73620

A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...

GO-2026-5450 vulnerabilities

Vulnerabilities for packages: virt-api-fips, virt-controller-fips, virt-handler, virt-handler-fips, virt-operator, virt-operator-fips, virt-launcher, virt-api, virt-controller...

GHSA-5GJX-96WQ-C8R2 vulnerabilities

Vulnerabilities for packages: helm...

GO-2023-2068 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2071 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2069 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2072 vulnerabilities

Vulnerabilities for packages: croc...

GO-2025-3838 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2024-2482 vulnerabilities

Vulnerabilities for packages: goreleaser...

GO-2026-5322 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2026-4474 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: dagdotdev...

JLSEC-2026-1319 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server...

EUVD-2026-58501

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing...

Linux Distros Unpatched Vulnerability : CVE-2026-73620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout and TagReference.create, allowing attackers to pass unsafe options via kwargs...

PT-2026-72095

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper limitation of a pathname to a restricted directory allows a remote attacker to write arbitrary files. Recommendations Update IBM Db2 Mirror for i version 7.4 to a fixed release...

PT-2026-72100

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A path traversal issue exists that could allow a remote attacker to write files to arbitrary locations. Path traversal is a flaw that allows an attacker to access or manipulate files an...

CVE-2026-72850

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing...