CVE-2026-5958

creationtimestamp| type| source ---|---|--- 2026-04-20 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-5958 2026-04-24 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkan46tfml2w 2026-05-04 16:27:13+00:00| seen|...

ROS-20260420-73-0016

A vulnerability in the maxcertlist parameter of certificate compression in TLS 1.3 of the OpenSSL library is related to uncontrolled memory allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

kernel security update

5.14.0-611.49.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CVE-2026-5966

creationtimestamp| type| source ---|---|--- 2026-04-19 23:52:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10855-e6d1b-2.html 2026-04-20 09:17:22+00:00| seen| Telegram/Lm9dzPhVRFRRMgyzsUGG1X5A2Qj2Q71JCDe8XQUe2-0mpLw 2026-04-20 10:08:41+00:00| seen|...

CVE-2026-39350 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips...

GHSA-9GCG-W975-3RJH vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-istio-csr-fips...

GHSA-9GCG-W975-3RJH vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

CVE-2026-39350 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

CVE-2026-5131

creationtimestamp| type| source ---|---|--- 2026-04-17 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-5131 2026-04-17 14:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjp46v4ca222...

CVE-2026-25599

creationtimestamp| type| source ---|---|--- 2026-04-16 22:11:24+00:00| seen| https://www.cert.si/en/cve-2026-25599 2026-06-01 13:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna5bhwura2j...

CVE-2026-6351

creationtimestamp| type| source ---|---|--- 2026-04-15 18:45:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10843-9ff91-2.html 2026-04-16 05:18:09+00:00| seen| Telegram/RpCSTqHfWBqrKG53EyhvOrMVfWJfX1b8PG9fT94i9MHNW6c 2026-04-16 05:18:17+00:00| seen|...

CVE-2026-6348

creationtimestamp| type| source ---|---|--- 2026-04-15 18:43:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10840-ba9b9-2.html 2026-04-16 05:18:09+00:00| seen| Telegram/RpCSTqHfWBqrKG53EyhvOrMVfWJfX1b8PG9fT94i9MHNW6c 2026-04-16 07:30:38+00:00| seen|...

CVE-2026-6296

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 23:26:09+00:00| seen| Telegram/uDqb5UNOJD19g19jmJKdnJBBrEUml8WxLQrnFn708j03zpg 2026-04-16 09:33:38+00:00| seen|...

CVE-2026-6298

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-19 02:43:24+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswmnvypc2k 2026-04-19 20:00:00+00:00| seen...

CVE-2026-6303

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-16 11:16:12+00:00| seen| Telegram/j-zpZhFSipqPFVaOoufvpDRNhg2whahduAHfYT4AdF4gH4 2026-04-19 20:00:00+00:00| seen|...

CVE-2026-6305

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 23:26:33+00:00| published-proof-of-concept| Telegram/Dn6UYWmEFhbqEaa4T9ZHT6FP05ZyLAZt2ntZ1ss8t6QaCo0 2026-04-17...

LDAP Injection

Overview Affected versions of this package are vulnerable to LDAP Injection via the parseDN handling and the LDAP store helpers in X509LDAPCertStoreSpi and LDAPStoreHelper. An attacker can influence LDAP search filters by supplying a crafted X.500 subject or issuer string that is parsed into an...

DEBIAN-CVE-2026-39984

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certificate chain signature, but the TSA-specific constraint...

PT-2026-33182

Name of the Vulnerable Software and Affected Versions Istio versions 1.25.0 through 1.27.8 Istio versions 1.28.0 through 1.28.5 Istio versions 1.29.0 through 1.29.1 Description In the AuthorizationPolicy, the serviceAccounts and notServiceAccounts fields incorrectly interpret dots . as regular...

GHSA-XM5M-WGH2-RRG3 Sigstore Timestamp Authority has Improper Certificate Validation in verifier

Authorization bypass via certificate bag manipulation in sigstore/timestamp-authority verifier An authorization bypass vulnerability exists in sigstore/timestamp-authority verifier timestamp-authority/v2/pkg/verification: VerifyTimestampResponse function correctly verifies the certificate chain b...