GO-2026-4408 vulnerabilities

Vulnerabilities for packages: cg, wolfictl...

GO-2026-4412 vulnerabilities

Vulnerabilities for packages: cg, wolfictl...

GO-2025-3815 vulnerabilities

Vulnerabilities for packages: cg...

GO-2025-3816 vulnerabilities

Vulnerabilities for packages: tw, cg, chainctl...

GO-2025-3701 vulnerabilities

Vulnerabilities for packages: cg, zot, k3s, wolfictl, melange...

GO-2026-4407 vulnerabilities

Vulnerabilities for packages: cg, wolfictl...

GO-2026-5233 vulnerabilities

Vulnerabilities for packages: cg...

GO-2026-5212 vulnerabilities

Vulnerabilities for packages: cg...

GO-2026-4409 vulnerabilities

Vulnerabilities for packages: cg, wolfictl...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: grype-fips, undock, trufflehog-fips, gitleaks, filebrowser, wolfictl, zarf, gptscript, cg, chezmoi, nuclei, mattermost-fips, gotenberg, grype, grype-db, k9s, chainctl, k9s-fips, syft, syft-fips, kubescape, mattermost, trufflehog, kots...

GO-2025-4160 vulnerabilities

Vulnerabilities for packages: k9s, cg, chainctl, zarf...

GO-2026-4588 vulnerabilities

Vulnerabilities for packages: apply-cve-bump, cg, dl, wolfictl...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent, cg, chainctl...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: dagdotdev, amazon-ssm-agent, cg, chainctl...

GO-2026-4883 vulnerabilities

Vulnerabilities for packages: envoy-gateway, prometheus-podman-exporter, skopeo-fips, pulumi, ko-fips, undock, cluster-api, chainloop-control-plane-fips, zarf-fips, cloudbeat, docker-credential-gcr, opentelemetry-collector, buildah, grafana-alloy-fips, podman, cluster-api-fips, kubedock, buf,...

CVE-2026-16055 Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login

The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentication cookie directly after the password check, which bypasses installed brute-force-protection and two-factor-authentication Contest Galle...

GHSA-7RP8-R62P-Q6WC vulnerabilities

Vulnerabilities for packages: apply-cve-bump, cg, dl, wolfictl...

CVE-2026-29049 vulnerabilities

Vulnerabilities for packages: apply-cve-bump, cg, dl, wolfictl...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-autoscaling, prometheus-fips, prometheus-podman-exporter, crossplane-provider-aws-memorydb, coder-fips, snyk-cli, ko-fips, terraform-provider-azurerm-fips, pulumi-kubernetes-operator, tekton-pipelines, trufflehog-fips,...

CVE-2026-57876

An unauthenticated out-of-bounds write vulnerability exists in onvif.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing HTTP request body data. A remote attacker may exploit this vulnerability by sending a...