GO-2026-5006 vulnerabilities

Vulnerabilities for packages: flux, mattermost, k3s, kaf, kyverno, guac, trivy, docker-machine-driver-harvester, helm, nerdctl, skaffold, podman, pulumi-kubernetes-operator, scorecard, external-secrets-operator, buildah, terragrunt, trivy-operator, gptscript, pulumi-language-java, gitea,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: mattermost, wuzz, actions-runner-controller, cfssl, cert-manager-cmctl, k3s, chisel, src, kube-logging-operator, whereabouts, tofu-controller, crossplane-provider-aws-lambda, guac, ctop, kube-vip-cloud-provider, kubernetes-dashboard-metrics-scraper, manifest-tool,...

GO-2025-4192 vulnerabilities

Vulnerabilities for packages: witness, docker-cli-buildx, spire-server, vexctl, teleport, cosign, aactl, ratify, flux-source-controller, tflint, zot, neuvector-sigstore-interface, tekton-chains, kubescape, kyverno-notation-aws, skaffold, gh, zarf, policy-controller, gitsign, tkn,...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: witness, docker-cli-buildx, spire-server, kyverno, vexctl, teleport, trivy, cosign, aactl, ratify, flux-source-controller, tflint, zot, neuvector-sigstore-interface, tekton-chains, buildkitd, kubescape, kyverno-notation-aws, skaffold, docker, gh, zarf, crossplane,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: flux, k3s, src, kube-logging-operator, cerbos, guac, portieris, render-template, trivy, aws-application-networking-k8s, chart-testing, docker-machine-driver-harvester, nri-redis, harbor-cli, envconsul, tflint, nats-server-config-reloader, fulcio, cloud-sql-proxy,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: flux-image-reflector-controller, flux, actions-runner-controller, terraform, k3s, terraform-provider-azurerm, flux-notification-controller, k3d, spire-server, flux-kustomize-controller, step-ca, guac, opentelemetry-collector-contrib, vexctl,...

EUVD-2026-58481

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

Zyxel USG FLEX 50(W) / USG20(W)-VPN 4.16 < 5.43 / ATP 4.32 < 5.43 / USG FLEX 4.50 < 5.43 Path Traversal

The firmware version of the Zyxel ZLD firewall device is affected by a path traversal vulnerability. A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from...

GHSA-MXCG-P696-RM94

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

CVE-2026-73479

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479

CVE-2026-73479 affects dua-cli. When printing marked file paths after exiting the TUI, it fails to filter OSC/CSI terminal escape sequences, allowing crafted file names to cause escape-sequence interpretation by the terminal emulator. Potential impacts include title spoofing and clipboard manipul...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

MAL-2026-13966 Malicious code in tizen-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf90f542c0f81ff50f903a216f44a5870bc0ac5ede472fa2c41af447994b58e4 On npm install, the package's postinstall lifecycle script collects host identifiers os.hostname, process.platform, process.arch, Node.js version,...

Malicious code in tizen-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf90f542c0f81ff50f903a216f44a5870bc0ac5ede472fa2c41af447994b58e4 On npm install, the package's postinstall lifecycle script collects host identifiers os.hostname, process.platform, process.arch, Node.js version,...

speakeasy v2.0.0b6

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

Malicious Package

Overview tizen-webdriver-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

vulnerabilities in Fortinet FortiWeb

Fortinet has identified vulnerabilities in FortiWeb. The first vulnerability involves improper authentication in several versions of FortiWeb, allowing an unauthorized attacker to access the GUI and CLI interfaces by submitting arbitrary login credentials. This vulnerability also occurs in FortiW...