35770 matches found
CVE-2026-32280 vulnerabilities
Vulnerabilities for packages: helm-set-status, argo-events, incert, certificate-transparency, grafana-operator, mc, kubernetes, apko, datadog-agent, mattermost, smarter-device-manager, temporal-ui-server, bento, multus-cni, spicedb-operator, malcontent, grafana-agent-operator, cosign, mailpit,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: helm-set-status, argo-events, incert, certificate-transparency, grafana-operator, mc, kubernetes, apko, datadog-agent, mattermost, smarter-device-manager, temporal-ui-server, bento, multus-cni, spicedb-operator, malcontent, grafana-agent-operator, cosign, mailpit,...
CVE-2026-27140 vulnerabilities
Vulnerabilities for packages: helm-set-status, argo-events, incert, certificate-transparency, grafana-operator, mc, kubernetes, apko, datadog-agent, mattermost, smarter-device-manager, gitea, temporal-ui-server, velero-plugin-for-microsoft-azure, bento, multus-cni, spicedb-operator, malcontent,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: helm-set-status, argo-events, incert, certificate-transparency, grafana-operator, mc, kubernetes, apko, datadog-agent, mattermost, smarter-device-manager, temporal-ui-server, bento, multus-cni, spicedb-operator, malcontent, grafana-agent-operator, cosign, mailpit,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: minio-object-browser, helm-set-status, terraform-provider-tls, argo-events, cloud-provider-azure, certificate-transparency, terraform-provider-sendgrid, opencost, mc, filebrowser, sftpgo-plugin-eventsearch, kubernetes, apko, datadog-agent, mattermost,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: helm-set-status, argo-events, incert, certificate-transparency, grafana-operator, mc, kubernetes, apko, datadog-agent, mattermost, smarter-device-manager, gitea, temporal-ui-server, velero-plugin-for-microsoft-azure, bento, multus-cni, spicedb-operator, malcontent,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, prometheus-bind-exporter, bank-vaults, rclone-fips, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-gcp, trivy-fips, verticadb-operator-fips,...
CVE-2026-32289 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, prometheus-bind-exporter, bank-vaults, rclone-fips, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-gcp, trivy-fips, verticadb-operator-fips,...
CVE-2026-27140 vulnerabilities
Vulnerabilities for packages: git-credential-oauth, regclient-fips, secretgen-controller-fips, crossplane-provider-gcp, trivy-fips, tkn-fips, jaeger, blobfuse2, hubble, terraform-provider-time, dockerize, lazygit, kube-rbac-proxy-fips, kubescape-server-fips, karma-fips, hugo-fips,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, mods, git-credential-oauth, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, kubernetes-ingress-defaultbackend,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, mods, git-credential-oauth, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, kubernetes-ingress-defaultbackend,...
GHSA-M4PR-4J3G-9V7V vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, mods, git-credential-oauth, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, kubernetes-ingress-defaultbackend,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: git-credential-oauth, regclient-fips, secretgen-controller-fips, crossplane-provider-gcp, trivy-fips, tkn-fips, jaeger, blobfuse2, hubble, terraform-provider-time, dockerize, lazygit, kube-rbac-proxy-fips, kubescape-server-fips, karma-fips, hugo-fips,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, mods, git-credential-oauth, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, kubernetes-ingress-defaultbackend,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, mods, git-credential-oauth, kubernetes-dashboard-auth-fips, seaweedfs-operator-fips, commercial-expanso-edge, kubernetes-ingress-defaultbackend,...
CVE-2026-34719
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-local addresses — only the URL scheme HTTP/HTTPS as well as the hostname was checked. This could end up in retrieving...
Linux Distros Unpatched Vulnerability : CVE-2026-40175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in...
EUVD-2026-21607
The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...
Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint
The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...
GHSA-Q98V-9F9W-F49Q Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint
The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...