230 matches found
GHSA-7RP8-R62P-Q6WC vulnerabilities
Vulnerabilities for packages: cg, wolfictl, dl, apply-cve-bump...
CVE-2026-29049 vulnerabilities
Vulnerabilities for packages: cg, wolfictl, dl, apply-cve-bump...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: chainctl, crossplane-provider-aws-organizations, crossplane-provider-aws-route53, act, cilium-cli, tigera-operator, crossplane-provider-aws-backup, argo-cd-fips, flux-notification-controller, kubernetes, k9s, crossplane-provider-aws-iam,...
CVE-2026-57876
An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a...
MINI-22CM-JR63-CG4R
Bulletin has no description...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: chainctl, k9s-fips, act, crossplane, crossplane-fips, wolfictl, gomplate-fips, argo-cd-fips, xeol, k9s, gitea-fips, cerbos, guac, amazon-ssm-agent, flux-image-automation-controller-fips, jfrog-cli, coder, gitaly, dagger, flux-fips, kyverno-fips, kaniko, grype,...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: netconsole: The sumutex should be acquired before navigating the configs hierarchy. There is a race between operations that iterate over the cgchildren list and concurrent additions/removals of userdata items through configfs. Th...
GHSA-7RMH-48MX-2VWC vulnerabilities
Vulnerabilities for packages: cg...
GHSA-7C37-GX6W-8VC5 vulnerabilities
Vulnerabilities for packages: cg...
CVE-2026-44310 vulnerabilities
Vulnerabilities for packages: cg...
CVE-2026-44309 vulnerabilities
Vulnerabilities for packages: cg...
GHSA-M3XC-H892-GGX6 vulnerabilities
Vulnerabilities for packages: rclone, telegraf, rclone-fips, syft, argo-cd-fips, chainloop-cli, nemo, seaweedfs-rocksdb, scorecard, cerbos, syft-fips, cg, amazon-ssm-agent, rancher-fleet-fips, packer, gitaly, teleport, rancher-fleet, argo-cd, kyverno-fips, terragrunt, gitlab-rails-ce-fips,...
CVE-2026-44740 vulnerabilities
Vulnerabilities for packages: rclone, telegraf, rclone-fips, syft, argo-cd-fips, chainloop-cli, nemo, seaweedfs-rocksdb, scorecard, cerbos, syft-fips, cg, amazon-ssm-agent, rancher-fleet-fips, packer, gitaly, teleport, rancher-fleet, argo-cd, kyverno-fips, terragrunt, gitlab-rails-ce-fips,...
CVE-2026-41507 Remote Code Execution (RCE) via String Literal Injection into math-codegen
math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the...
arthexis (>=0.2.6 <=0.8.0), cg-django-uaa (=2.1.9) +29 more potentially affected by CVE-2026-5766 via django (>=5.2.0 <=5.2.13)
django PYPI version =5.2.0, =0.2.6, =0.1.0, =0.1.0, =1.3.0, =1.92.0.5, =4.2.0, =0.0.7, =3.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-5766 Source advisory: OSV:GHSA-W26R-RMM8-9C29...
GHSA-P6X5-P4XF-CC4R Remote Code Execution (RCE) via String Literal Injection into math-codegen
Impact String literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the parser. Any application exposing a math evaluation endpoint where user input flo...
arthexis (>=0.2.6 <=0.8.0), cg-django-uaa (=2.1.9) +29 more potentially affected by CVE-2026-3902 via django (>=5.2.0 <=5.2.12)
django PYPI version =5.2.0, =0.2.6, =0.1.0, =0.1.0, =1.3.0, =1.92.0.5, =4.2.0, =0.0.7, =3.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-3902 Source advisory: OSV:GHSA-MVFQ-GGXM-9MC5...
MINI-V794-PHG5-CFCG
Bulletin has no description...