GO-2026-4471 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2025-4109 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2026-5047 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, dapr, bento, opentelemetry-collector-contrib...

GO-2024-2476 vulnerabilities

Vulnerabilities for packages: dex...

GO-2026-4736 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip...

GO-2024-2842 vulnerabilities

Vulnerabilities for packages: skopeo, buildah, zot...

GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater...

GO-2025-4024 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2025-4223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by HaiND in WordPress Plugin Ezoic versions = 2.22.11...

JLSEC-2026-1322 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...

JLSEC-2026-1325 sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay...

Cross-Site WebSocket Hijacking (CSWSH)

Spring for GraphQL is vulnerable to Cross-Site WebSocket Hijacking CSWSH. The vulnerability is due to insufficient protection of WebSocket connections, which allows an attacker to trick an authenticated user into visiting a malicious webpage and execute arbitrary GraphQL operations using the...

CVE-2026-16739

The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.2 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attackers to mark arbitrary orders as confirmed and, in a...

GHSA-JGV4-5FJV-3XP7 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

CVE-2026-19016 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

GHSA-7QHJ-3FG3-MH5R vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

GHSA-JGRX-MGXX-JF9V vulnerabilities

Vulnerabilities for packages: arangodb...

SUSE CVE-2026-73213

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...