7868 matches found
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: podinfo-fips, crossplane-provider-azure-portal, terragrunt, crossplane, osv-scanner, kube-metrics-adapter, fleet-server, databricks-cli, rancher-helm, aws-fsx-csi-driver, virt-controller-fips, terraform-provider-azurerm-fips,...
MINI-6H3C-J996-38W8
Bulletin has no description...
MINI-FJM6-3WQ8-XFWQ
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-72096
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: make error counter atomic The error counter v-corruptederrs was not atomic, thus it could be subject to race conditions. The call to...
PT-2026-76438
These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-74512: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...
Linux Distros Unpatched Vulnerability : CVE-2026-74512
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter...
PT-2026-72964
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the audit system. The audit del rule function destroys e-rule.exe through audit remove mark rule before the rule is unlinked from RCU-visible filter list...
OPENSUSE-SU-2026:11512-1 cargo-audit-0.22.2~git0.281452c-2.1 on GA media
These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-2.1 package on the GA media of openSUSE Tumbleweed...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: postgres-operator, terragrunt, mountpoint-s3-csi-driver, manifest-tool, virt-controller-fips, terraform-provider-azurerm-fips, kube-metrics-adapter-fips, kubo, crossplane-provider-aws-route53recoveryreadiness, keda, task-fips, langfuse-fips,...
MINI-PGC2-4Q6Q-R3QH
Bulletin has no description...
MINI-2J6F-G6R4-P9WW
Bulletin has no description...
MINI-QQJ9-99R5-7576
Bulletin has no description...
UBUNTU-CVE-2026-72816
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
CVE-2026-72816
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
CVE-2026-72816
The CVE-2026-72816 affects go-chi/chi up to version 5.2.1, specifically the RealIP middleware (realip.go). The realIP() function reads client-controlled headers (True-Client-IP, X-Real-IP, X-Forwarded-For) and overwrites r.RemoteAddr without validating the origin of the request from a trusted pro...
