CVE-2025-71289

creationtimestamp| type| source ---|---|--- 2026-07-01 02:35:55+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630...

CVE-2026-31486

creationtimestamp| type| source ---|---|--- 2026-07-01 02:35:32+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630...

CVE-2026-46244

creationtimestamp| type| source ---|---|--- 2026-07-01 02:34:29+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-02 06:52:32+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: skaffold, tekton-pipelines, etcd-fips, prometheus-mongodb-exporter, k9s, upwind-agent, containerd, flux-fips, zitadel, knative-kafka-broker, chisel-fips, prometheus-operator, kubevela-fips, omnictl-multiarch, trivy-fips, snyk-cli, opentofu, zot,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-elasticache, crossplane-provider-family-azure, crossplane-provider-aws-firehose, vault-benchmark, argo-events, cilium-cli, crossplane-provider-aws-rds, caddy, flux-image-automation-controller, cloudflared, argocd-image-updater,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-azure, vault-benchmark, argo-events, cilium-cli, caddy, flux-image-automation-controller, argocd-image-updater, crossplane-provider-azure-sql, crossplane-provider-azure-authorization, loki, flux-notification-controller, podman, chezmoi,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: snyk-cli, prometheus, osv-scanner, gitea, kots, cloud-provider-aws, cilium-cli, k9s, spire-server, flux-image-automation-controller, argocd-image-updater, nerdctl, aactl, zarf, loki, kaf, kubernetes-dashboard, k3s, external-dns, rancher, zot, kine, minio,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: argo-events, cilium-cli, caddy, flux-image-automation-controller, argocd-image-updater, loki, podman, chezmoi, containerd, fscrypt, pulumi-language-yaml, istio, docker-cli-buildx, kubernetes, grype, cert-manager, syft, guac, pulumi-language-dotnet,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: snyk-cli, docker-machine-driver-harvester, prometheus, osv-scanner, gitea, kots, cloud-provider-aws, cilium-cli, k9s, spire-server, flux-image-automation-controller, argocd-image-updater, nerdctl, aactl, zarf, loki, kaf, kubernetes-dashboard, k3s, external-dns,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: snyk-cli, prometheus, kots, cloud-provider-aws, cilium-cli, spire-server, nerdctl, aactl, loki, kaf, kubernetes-dashboard, k3s, external-dns, rancher, podman, zot, kine, minio, opentelemetry-collector, kyverno, containerd, fscrypt, telegraf, helm,...

CVE-2026-13281

creationtimestamp| type| source ---|---|--- 2026-06-26 09:45:05+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp76fcsqgb2j 2026-06-28 22:30:18+00:00| seen|...

CVE-2026-55964

Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have the keyCertSign key usage when a Key Usage extension is present, but chain-supplied temporary CAs WOLFSSLTEMPCA added while building a certificate path were previously exempt...

DEBIAN-CVE-2026-11310

X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier wolfSSLX509verifycert. This affects only builds with --enable-opensslextra OPENSSLEXTRA and whose application validates certificates by calling X509verifycert with caller-supplied untrusted intermediate certificates; for...

CVE-2026-13034

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:23+00:00| seen|...

CVE-2026-13033

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-06-30 22:37:06+00:00| seen|...

CVE-2026-5952

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:20+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3rhugxdv2z 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-5309

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:15+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3sky7vtu2t 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-2238

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3toslmhm2b 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: thanos, volsync-fips, ratify, terraform-provider-databricks-fips, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, kapp-controller, kube-arangodb, flux-fips, metrics-server, crossplane-fips, manifest-tool,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: thanos, volsync-fips, ratify, terraform-provider-databricks-fips, tekton-pipelines, crossplane-provider-aws-kinesis-fips, etcd-fips, kapp-controller, kube-arangodb, flux-fips, metrics-server, crossplane-fips, manifest-tool,...