GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: witness, apko, trivy-operator, flux-source-controller, cloud-provider-aws, crossplane-provider-family-azure, argo-events, ko, snyk-cli, step, mattermost, tekton-chains, pulumi-kubernetes-operator, pulumi-language-java, rancher, atlantis, opentelemetry-collector,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: witness, apko, trivy-operator, docker-machine-driver-linode, flux-source-controller, cloud-provider-aws, crossplane-provider-family-azure, argo-events, ko, snyk-cli, step, mattermost, tekton-chains, pulumi-kubernetes-operator, crossplane-provider-aws-memorydb,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: nerdctl, kine, kubescape, gitea, trivy-operator, flux-image-automation-controller, istio, k3s, cert-manager, flux-source-controller, cloud-provider-aws, loki, zot, snyk-cli, trivy, falco-no-driver, mattermost, zarf, gitlab-kas, external-dns, skaffold, fscrypt,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: witness, apko, trivy-operator, flux-source-controller, cloud-provider-aws, argo-events, snyk-cli, step, mattermost, pulumi-kubernetes-operator, pulumi-language-java, rancher, opentelemetry-collector, terragrunt, caddy, pulumi-language-dotnet, cilium-cli, kots, melang...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: nerdctl, kine, istio, k3s, cert-manager, loki, cloud-provider-aws, zot, snyk-cli, falco-no-driver, mattermost, gitlab-kas, buildah, external-dns, fscrypt, external-secrets-operator, rancher, cilium, opentelemetry-collector, kaf, prometheus, helm, kubernetes-dashboard...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nerdctl, kine, kubescape, gitea, trivy-operator, flux-image-automation-controller, istio, k3s, cert-manager, flux-source-controller, cloud-provider-aws, loki, zot, snyk-cli, trivy, falco-no-driver, mattermost, zarf, gitlab-kas, external-dns, skaffold, fscrypt,...

CVE-2026-13281

creationtimestamp| type| source ---|---|--- 2026-06-26 09:45:05+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp76fcsqgb2j 2026-06-28 22:30:18+00:00| seen|...

CVE-2026-55964

Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have the keyCertSign key usage when a Key Usage extension is present, but chain-supplied temporary CAs WOLFSSLTEMPCA added while building a certificate path were previously exempt...

DEBIAN-CVE-2026-11310

X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier wolfSSLX509verifycert. This affects only builds with --enable-opensslextra OPENSSLEXTRA and whose application validates certificates by calling X509verifycert with caller-supplied untrusted intermediate certificates; for...

CVE-2026-11310 X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring

X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier wolfSSLX509verifycert. This affects only builds with --enable-opensslextra OPENSSLEXTRA and whose application validates certificates by calling X509verifycert with caller-supplied untrusted intermediate certificates; for...

CVE-2026-13034

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-07-01 02:46:23+00:00| seen|...

CVE-2026-13033

creationtimestamp| type| source ---|---|--- 2026-06-25 05:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260625 2026-06-25 12:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4ey2p4eu2c 2026-06-30 22:37:06+00:00| seen|...

CVE-2026-5952

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:20+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3rhugxdv2z 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-5309

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:15+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:30:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3sky7vtu2t 2026-06-25 12:00:27+00:00| seen|...

CVE-2026-2238

creationtimestamp| type| source ---|---|--- 2026-06-25 05:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260625 2026-06-25 06:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp3toslmhm2b 2026-06-25 12:00:27+00:00| seen|...

dracut security update

057-115.git20260527.0.1 - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. Orabug: 38705580 - Ship Oracle IMA certificate Orabug: 35992862 - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate Orabug: 35992862 -...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: kueue, podman-fips, rancher-webhook-fips, witness, telegraf, crossplane-provider-aws-ecs, fulcio, kyverno, nuclei, backup-restore-operator-fips, cert-manager-csi-driver, commercial-grafana, emissary, ld-relay, go-sqlcmd, kube-state-metrics, docker-compose-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kueue, podman-fips, rancher-webhook-fips, witness, telegraf, crossplane-provider-aws-ecs, fulcio, kyverno, nuclei, backup-restore-operator-fips, cert-manager-csi-driver, commercial-grafana, emissary, ld-relay, go-sqlcmd, kube-state-metrics, docker-compose-fips,...

GHSA-7WWH-XCC3-9FCG Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module

Summary The PayPal webhook endpoint /extensions/paypal/webhook processes the PAYPAL-CERT-URL HTTP header without validation, allowing attackers to control server-side HTTP request destinations. Technical details: The /extensions/paypal/webhook endpoint processes incoming webhook requests and trus...

CVE-2026-12249

An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Services AD CS certificate auto-enrollment via the vendored Samba client script internal/policies/certificate/python/vendorsamba/gp/gpcertautoenrollext.py, ADSys utilizes a plaintext...