GO-2026-5013 vulnerabilities

Vulnerabilities for packages: wal-g, cloudflared, istio, kubescape, grype, cilium-cli, docker, argocd-image-updater, tw, prometheus-operator, containerd, pulumi-language-java, tkn, crossplane-provider-family-azure, gitlab-pages, flux-kustomize-controller, glab, splunk-otel-collector, gptscript,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cluster-api-ipam-provider-in-cluster, kubernetes-csi-driver-nfs, sonobuoy, apache-exporter, cilium-cli, http-echo, mongodb-kubernetes-operator, cortex, paranoia, ratify, kubescape-operator, vault-k8s, whereabouts, ferretdb, flux-kustomize-controller, cfssl,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: kubescape, docker-cli-buildx, ratify, skaffold, tkn, kyverno-notation-aws, tflint, vexctl, sigstore-scaffolding, gitsign, policy-controller, flux-source-controller, zot, aactl, tekton-chains, zarf, ko, teleport, goreleaser, falcoctl, spire-server, cosign, gh, witness...

GO-2026-4309 vulnerabilities

Vulnerabilities for packages: tkn, goreleaser, falcoctl, aactl, kyverno-notation-aws, gitsign, policy-controller, ratify, flux-source-controller, witness, zot, teleport...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: trivy-operator, kubescape, docker, docker-cli-buildx, ratify, skaffold, tkn, kyverno-notation-aws, tflint, crossplane, sigstore-scaffolding, vexctl, gitsign, policy-controller, flux-source-controller, zot, aactl, buildkitd, kyverno, tekton-chains, zarf, ko, teleport,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wal-g, kubernetes-csi-driver-nfs, delve, cilium-cli, prometheus-operator, ratify, containerd, nodetaint, tkn, dgraph, nginx-prometheus-exporter, rabbitmq-default-user-credential-updater, gptscript, hubble, rabbitmq-cluster-operator, render-template,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: trivy-operator, kubescape, docker, ratify, skaffold, tkn, kyverno-notation-aws, tflint, vexctl, sigstore-scaffolding, gitsign, policy-controller, rekor, flux-source-controller, zot, aactl, buildkitd, tekton-chains, zarf, ko, teleport, goreleaser, falcoctl,...

openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw

A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS Amazon Web Services signature to the /v3/ec2tokens ...

CVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

CVE-2026-73658

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

USN-8530-2 linux-aws-hwe vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

Malicious code in notafollower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e076dd548fea7ce80a77e7810b30c0a5d95c0b6ae4bf3d929281da70dbec1768 [email protected] declares preinstall and postinstall lifecycle scripts that run inline Node code targeting the AWS EC2 Instance Metadata Service. T...

MAL-2026-13986 Malicious code in notafollower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e076dd548fea7ce80a77e7810b30c0a5d95c0b6ae4bf3d929281da70dbec1768 [email protected] declares preinstall and postinstall lifecycle scripts that run inline Node code targeting the AWS EC2 Instance Metadata Service. T...

CLEANSTART-2026-OB14501 Security fixes in aws-network-policy-agent 1.3.5-r2

Package aws-network-policy-agent version 1.3.5-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-OD94045 Security fixes in aws-network-policy-agent-fips 1.3.7-r1

Package aws-network-policy-agent-fips version 1.3.7-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-GR38496 Security fixes in aws-eks-pod-identity-agent 0.2.1-r1

Package aws-eks-pod-identity-agent version 0.2.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-JT66111 Security fixes in velero-plugin-for-aws-fips 1.13.2-r1

Package velero-plugin-for-aws-fips version 1.13.2-r1 fixes 13 vulnerabilities: CVE-2026-39822, CVE-2026-42505, CVE-2026-33186, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-IK78865 Security fixes in velero-plugin-for-aws-fips 1.14.2-r1

Package velero-plugin-for-aws-fips version 1.14.2-r1 fixes 11 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39822...

PT-2026-71879

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.5, Aws4FetchClient.buildUrl and Aws4FetchClient.presign in apps/webapp/app/v3/objectStoreClient.server.ts assign user-controlled packet keys to URL.pathname, while...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the Base64 decoder when processing crafted Base64-encoded input on platforms where the char type is signed. An attacker can cause an application crash by submitting specially crafted input. Remediation A fix was...