GHSA-G35J-5V93-P28M vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu, linux-gcp...

GHSA-GJ4P-F535-7C3J vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu, linux-gcp...

GHSA-M2VM-4PMQ-6GPC vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu, linux-gcp...

openSUSE 16 Security Update : aws-c-event-stream (openSUSE-SU-2026:20477-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20477-1 advisory. Changes in aws-c-event-stream: - CVE-2026-5190: Fixed a out-of-bounds write caused by crafted event-stream messages bsc1261298 Tenable has extracted the...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, spicedb, vcluster, docker, kiali, flux-source-controller, kaniko, neuvector-sigstore-interface, ferretdb, flyte, node-feature-discovery,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, grype, melange, crossplane-provider-azure-sql, spicedb, vcluster, docker, kiali, flux-source-controller, kaniko, neuvector-sigstore-interface, ferretdb, flyte, node-feature-discovery,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: kubo-fips, jobset-fips, cloudprober-fips, volsync-fips, cert-manager-webhook-pdns, spicedb-operator, nemo, commercial-expanso-edge, crossplane-provider-aws-chime, datadog-agent, thanos-receive-controller-fips, opentelemetry-operator, cloud-provider-azure,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: kubo-fips, jobset-fips, cloudprober-fips, volsync-fips, cert-manager-webhook-pdns, spicedb-operator, nemo, commercial-expanso-edge, crossplane-provider-aws-chime, datadog-agent, thanos-receive-controller-fips, opentelemetry-operator, cloud-provider-azure,...

Ubuntu: Security Advisory (USN-8159-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8148-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for aws-c-event-stream (important)

openSUSE security update: security update for aws-c-event-stream ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20477-1 Rating: important References: bsc1261298 Cross-References: CVE-2026-5190 Affected Products: openSUSE Leap 16.0...

OPENSUSE-SU-2026:10512-1 aws-c-event-stream-devel-0.7.0-1.1 on GA media

These are all security issues fixed in the aws-c-event-stream-devel-0.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

CVSSv3.1 Rating: Medium CVSSv3.1 Score: 5.9 CVSSv3.1 Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Summary and Impact An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame...

PT-2026-90006

Name of the Vulnerable Software and Affected Versions Amazon AWS SDK for Go v2 versions prior to release-2026-03-23 Description An unrecovered panic exists in the event stream header decoder. An unauthenticated remote actor can cause the consuming application process to terminate by sending a...

CVE-2026-5707

Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio RES version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To...

CVE-2026-35022

Rejected reason: This CVE ID has been rejected by its CVE Numbering Authority CNA. It was determined that the -p flag behavior is documented in Anthropic's claude -h output with an explicit warning that non-interactive mode should only be used in trusted directories, making this intended and...

PT-2026-30708

Name of the Vulnerable Software and Affected Versions Anthropic Claude Code CLI and Claude Agent SDK affected versions not specified Description Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection issue in authentication helper execution. Helper configuration values are...

CVE-2026-5709: Improper Neutralization of Special Elements used in an OS Command

Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio RES version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the FileBrowser functionality. To remediat...

CVE-2026-5707: Improper Neutralization of Special Elements used in an OS Command

Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio RES version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To...

Ubuntu: Security Advisory (USN-8148-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...