GHSA-94JR-7PQP-XHCQ vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tekton-chains, tkn, tkn-fips...

GHSA-M2CX-GPQF-QF74 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tekton-chains, tkn, tkn-fips...

CVE-2026-40923 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tekton-chains, tkn, tkn-fips...

GHSA-RX35-6RHX-7858 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tekton-chains, tkn, tkn-fips...

CVE-2026-40924 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tekton-chains, tkn, tkn-fips...

CVE-2026-40938 vulnerabilities

Vulnerabilities for packages: tekton-chains-fips, tekton-pipelines-fips, tekton-pipelines, tekton-chains, tkn, tkn-fips...

ctf-writeups

ctf-writeups Retos de HTB, TryHackMe y DFIR — documentado...

FreeBSD : zeek -- potential DoS vulnerabilities (0d8b1126-0864-4934-b63f-c713526ead32)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0d8b1126-0864-4934-b63f-c713526ead32 advisory. Tim Wojtulewicz of Corelight reports: A series of DNS messages containing long DNS compression chains c...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, docker-cli-buildx, aactl, teleport, slsa-verifier, trivy, kubescape, tflint, docker, gh,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: vexctl, neuvector-sigstore-interface, flux-source-controller, trivy-operator, falcoctl, zarf, witness, kyverno-notation-aws, skaffold, cosign, tkn, ratify, spire-server, docker-cli-buildx, aactl, teleport, slsa-verifier, trivy, kubescape, tflint, docker, gh,...

GHSA-6R77-HQX7-7VW8 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

Summary A Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests to internal and external systems. By injecting malicious prompt templates, attackers can bypass th...

OpenTofu has unbounded memory usage, high CPU usage, or deadlock in "tofu init" with maliciously-crafted dependency responses

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or deadlock when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...

coruna-exploit-kit-analysis

Coruna iOS Exploit Kit — Reverse Engineering Analysis Def...

vulnswarm

VulnSwarm AI-powered vulnerability discovery using multi-agen...

BIT-GOLANG-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

SUSE CVE-2026-32281

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

DEBIAN-CVE-2026-32281

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CVE-2026-32281

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CVE-2026-32281

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...