RGui 代码问题漏洞

RGui is a web interface system for cloud platform management and resource visualization operations by The R Foundation. Version RGui 3.5.0 has a code vulnerability; this vulnerability stems from a local buffer overflow in the GUI preferences dialog box, which may allow arbitrary code to be execut...

infosec-notebook

infosec-notebook Personal cybersecurity notes and references...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: osv-scanner, libnvidia-container, crossplane, kubernetes-dashboard, buf, kubescape, oras, aws-flb-firehose, buildah, aactl, pulumi-language-java, dive, licenseclassifier, kubernetes, zot, act, opa-envoy, syft, newrelic-fluent-bit-output, chezmoi, external-dns, incert...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, terraform-provider-aws, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, kubernetes, zot, litefs, opa-envoy, syft, tetragon, newrelic-fluent-bit-output,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, terraform-provider-aws, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, kubernetes, zot, litefs, opa-envoy, syft, tetragon, newrelic-fluent-bit-output,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, terraform-provider-aws, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, kubernetes, zot, litefs, opa-envoy, syft, tetragon, newrelic-fluent-bit-output,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, terraform-provider-aws, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, kubernetes, zot, litefs, opa-envoy, syft, tetragon, newrelic-fluent-bit-output,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, terraform-provider-aws, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, kubernetes, zot, litefs, opa-envoy, syft, tetragon, newrelic-fluent-bit-output,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: osv-scanner, grafana-rollout-operator, libnvidia-container, crossplane, kubernetes-dashboard, cri-tools, vault-secrets-webhook, spiffe-helper, envoy-ratelimit, kubescape, terraform-provider-aws, amazon-cloudwatch-agent-operator, kubeflow-katib, aws-flb-firehose, gatu...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: govulncheck, buf, yunikorn-web, ctop, terraform-provider-aws, amazon-cloudwatch-agent-operator, clickhouse-operator, mkcert, nri-mssql, github-mcp-server, node-problem-detector, kubernetes, zot, litefs, opa-envoy, syft, tetragon, newrelic-fluent-bit-output,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: nerdctl, flux-helm-controller, helm-exporter, crossplane-provider-aws-sqs-fips, request-1279, tetragon, k8ssandra-client-fips, sftpgo-plugin-geoipfilter, secrets-store-csi-driver-fips, terraform-provider-pagerduty-fips, image-factory, crossplane-aws-provider,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: nerdctl, flux-helm-controller, helm-exporter, crossplane-provider-aws-sqs-fips, request-1279, tetragon, k8ssandra-client-fips, sftpgo-plugin-geoipfilter, secrets-store-csi-driver-fips, terraform-provider-pagerduty-fips, image-factory, crossplane-aws-provider,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: request-1279, yam, velero-plugin-for-microsoft-azure-fips, sftpgo-plugin-geoipfilter, image-factory-fips, cerbos, kafkaexporter-fips, tempo, volsync, aws-flb-cloudwatch, fixuid, rke2-runtime-fips, virt-handler-fips, grafana-mimir, opensearch-k8s-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, flux-helm-controller, helm-exporter, crossplane-provider-aws-sqs-fips, request-1279, tetragon, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, flux-helm-controller, helm-exporter, crossplane-provider-aws-sqs-fips, request-1279, tetragon, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, flux-helm-controller, helm-exporter, crossplane-provider-aws-sqs-fips, request-1279, tetragon, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: request-1279, yam, velero-plugin-for-microsoft-azure-fips, sftpgo-plugin-geoipfilter, image-factory-fips, cerbos, kafkaexporter-fips, tempo, volsync, aws-flb-cloudwatch, fixuid, rke2-runtime-fips, virt-handler-fips, grafana-mimir, opensearch-k8s-operator,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, flux-helm-controller, helm-exporter, crossplane-provider-aws-sqs-fips, request-1279, tetragon, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nerdctl, flux-helm-controller, helm-exporter, crossplane-provider-aws-sqs-fips, request-1279, tetragon, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, sftpgo-plugin-geoipfilter, cluster-api-ipam-provider-in-cluster,...

CVE-2026-34719

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-local addresses — only the URL scheme HTTP/HTTPS as well as the hostname was checked. This could end up in retrieving...