CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kaf, nri-elasticsearch, kubernetes-replicator, nri-consul, emissary, git-lfs, opencost, conjur-cli, podman, newrelic-infrastructure-agent, cadvisor, nfs-subdir-external-provisioner, rclone, pvc-autoresizer, certificate-transparency, fluxcd-kustomize-mutating-webhook,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kaf, runc, terraform-provider-aws, neuvector-scanner, terraform-provider-azuread, crossplane-provider-azure-storage, emissary, kyverno, azure-service-operator, spire-controller-manager, opencost, task, envconsul, newrelic-infrastructure-agent,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: atlantis-fips, minio-object-browser, thanos-receive-controller, spqr, flux-helm-controller-fips, prometheus-elasticsearch-exporter, keda, rancher, harbor-registry-fips, gomplate, listmonk, kyverno, crossplane-provider-aws-s3-fips, trivy-operator, kubescape,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: chezmoi, atlantis-fips, minio-object-browser, thanos-receive-controller, spqr, flux-helm-controller-fips, prometheus-elasticsearch-exporter, keda, vendir-fips, rancher, harbor-registry-fips, gomplate, listmonk, kyverno, crossplane-provider-aws-s3-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: chezmoi, minio-object-browser, keda, rancher, listmonk, kyverno, kubevirt-cdi-controller-fips, git-sync, nova, nerdctl, spegel, neuvector-scanner, rancher-helm, pulumi-language-yaml, prometheus-elasticsearch-exporter-fips, volume-modifier-for-k8s, istio-fips,...

CVE-2026-5501 Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates

wolfSSLX509verifycert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints CA:FALSE that is legitimately signed by a trusted root. An attacker who obtains any leaf...

CVE-2026-33771

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410 2026-04-09 23:29:35+00:00| seen| Telegram/Kq2o4LPf2BGuBLl8KciQDld7X5AUdxQvsJMa5JmTWnsS0Y 2026-04-10 01:21:54+00:00| seen|...

CVE-2025-59969

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410...

CVE-2026-21919

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410...

CVE-2025-13914

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410 2026-04-09 23:29:35+00:00| seen| Telegram/Kq2o4LPf2BGuBLl8KciQDld7X5AUdxQvsJMa5JmTWnsS0Y 2026-04-10 01:55:59+00:00| seen|...

CVE-2026-33791

creationtimestamp| type| source ---|---|--- 2026-04-09 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260410...

CLEANSTART-2026-MI26424 net/url package does not set a limit on the number of query parameters in a query

Multiple security vulnerabilities affect the cert-manager package. The net/url package does not set a limit on the number of query parameters in a query. See references for individual vulnerability details...

CLEANSTART-2026-BY59711 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the cert-manager-webhook-pdns-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-5841

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5841 2026-04-09 07:17:08+00:00| published-proof-of-concept| Telegram/PMg85ruQxGJV3fewnx4iF85fyDu3eKOw9onWzzjaoGbfReM...

CVE-2026-5838

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5838...

CVE-2026-5873

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-13...

CVE-2026-5861

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-13...

CVE-2026-5905

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-14...

CVE-2026-5860

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-13...

CVE-2026-5878

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-12 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260413 2026-04-14...