CLEANSTART-2026-LM14651 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-XT72047 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-YV85299 Security fix for GHSA-8wmf-6v46-5gfg applied in: prometheus-operator 0.92.1-r6, argo-cd 3.4.10-r3

GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RS39844 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-CD37394 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

GitLab < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-14814)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cach...

GitLab 13.6 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-9268)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticat...

GitLab 19.2 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-97229)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an...

GitLab 18.7 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-16301)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an...

CVE-2026-85377

Access of resource using incompatible type 'type confusion' in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83888

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70275

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-70041

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

CVE-2026-83888

A buffer over-read vulnerability exists in the Windows CD-ROM Driver , which could allow an unauthorized attacker to elevate privileges over a network. While the specific affected versions are not provided, the vulnerability involves the driver reading more data from a buffer than intended, poten...

CVE-2026-70041

A buffer over-read vulnerability exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector requiring low privileges. Specific details regarding the und...

CVE-2026-85377

A type confusion vulnerability (CWE-843) exists in the Windows CD-ROM Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is reported as having a HIGH base severity score of 7.8. While specific affected versions are not detailed in the provid...

CVE-2026-70275

A vulnerability exists in the Windows CD-ROM File System Driver due to an untrusted pointer dereference . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . No specific exploitations or in-the...

CVE-2026-77459

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-77459 Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...