GO-2023-2402 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, kubernetes-dashboard, kube-state-metrics, fulcio, docker-credential-acr-env, temporal-server, rqlite, src-fingerprint, gomplate, scorecard, buildkitd, kubernetes-event-exporter, melange,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, kube-logging-operator, crossplane-provider-azure-managedidentity, cluster-api-helm-controller, chisel, fuse-overlayfs-snapshotter, karpenter, terraform-provider-acme, cilium, grafana-operator, kube-state-metrics, node-problem-detector,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, cluster-api-helm-controller, fuse-overlayfs-snapshotter, azurefile-csi, cilium, kargo, crossplane-provider-keycloak, seaweedfs, kube-metrics-adapter, crossplane-provider-aws-cloudformation, azure-service-operator, gomplate,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, crossplane-provider-azure-managedidentity, kubernetes-dashboard, chisel, gptscript, terraform-provider-acme, cilium, nuclei, kargo, crossplane-provider-aws-rds, crossplane-provider-keycloak, fulcio, skaffold, crossplane-provider-aws-cloudformation, gomplate,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, kube-logging-operator, fuse-overlayfs-snapshotter, local-static-provisioner, kargo, redka, seaweedfs, kpt, kube-metrics-adapter, src-fingerprint, crossplane-provider-aws-cloudformation, gomplate, libnvidia-container,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane-provider-azure-sql, glab, policy-controller, crossplane-provider-azure-managedidentity, opentelemetry-collector-contrib, crossplane-provider-azure-storage, pulumi-kubernetes-operator, ksops, nuclei, kargo, falcoctl, fulcio,...

GO-2024-2687 vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, kube-logging-operator, fuse-overlayfs-snapshotter, kargo, kpt, src-fingerprint, crossplane-provider-aws-cloudformation, gomplate, crossplane-provider-aws-dynamodb, kubernetes-event-exporter, velero, melange, nri-kubernetes, gitness, kubevela,...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

CVE-2026-57104

CVE-2026-57104 is a cross-site scripting (XSS) flaw in Azure Storage Explorer where improper input neutralization during web page generation enables an unauthenticated remote attacker to elevate privileges over a network. Microsoft's MSRC update guide lists a fix; CISA's SSVC assessment shows no ...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

EUVD-2026-56590

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

Azure Storage Explorer Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

PT-2026-70394

Name of the Vulnerable Software and Affected Versions Azure Storage Explorer affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allo...

SUSE SLES15 Security Update : azure-storage-azcopy (SUSE-SU-2026:3528-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3528-1 advisory. Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded...

Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. CVE-2026-56852:...

SUSE-SU-2026:3528-1 Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: Update to 10.32.6. Security issues fixed: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266657. - CVE-2026-56852:...

azure-storage-azcopy-10.32.6-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11444-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...