CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, spire-controller-manager, kubernetes-csi-driver-nfs, aws-flb-firehose, amazon-cloudwatch-agent-operator, kots, docker-machine-driver-linode, newrelic-nri-statsd, amass, victoriametrics-cluster...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: spiffe-helper, spegel, authservice, k8sgpt-operator, terraform-provider-pagerduty, kube-state-metrics, jitsucom-bulker, k8s-device-plugin, eksctl, goreleaser, redpanda, apache-exporter, rancher, spire-controller-manager, kubernetes-csi-driver-nfs,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, spire-controller-manager, kubernetes-csi-driver-nfs, aws-flb-firehose, amazon-cloudwatch-agent-operator, kots, docker-machine-driver-linode, newrelic-nri-statsd, amass, victoriametrics-cluster...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: wazero, minify, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, spire-controller-manager, kubernetes-csi-driver-nfs, aws-flb-firehose, amazon-cloudwatch-agent-operator, kots, docker-machine-driver-linode, newrelic-nri-statsd, amass,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: wazero, minify, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, spire-controller-manager, kubernetes-csi-driver-nfs, aws-flb-firehose, amazon-cloudwatch-agent-operator, kots, docker-machine-driver-linode, newrelic-nri-statsd, amass,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, vault-secrets-operator, cadence-fips, commercial-grafana, terraform-provider-pagerduty-fips, k8s-device-plugin, redpanda, crossplane-provider-keycloak-fips, spire-controller-manager, amazon-ecs-agent, mattermost-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, vault-secrets-operator, cadence-fips, commercial-grafana, terraform-provider-pagerduty-fips, k8s-device-plugin, redpanda, crossplane-provider-keycloak-fips, spire-controller-manager, amazon-ecs-agent, mattermost-fips,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: flagger-fips, wazero, cadence-fips, kubernetes-csi-driver-nfs, crossplane-provider-sql-fips, aws-flb-firehose, amazon-cloudwatch-agent-operator, newrelic-nri-statsd, prometheus-podman-exporter, victoriametrics-cluster, flannel, ko-fips, esbuild,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, amazon-ssm-agent, vault-secrets-operator, cadence-fips, commercial-grafana, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, crossplane-provider-keycloak-fips, spire-controller-manager,...

GHSA-M4PR-4J3G-9V7V vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, amazon-ssm-agent, vault-secrets-operator, cadence-fips, commercial-grafana, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, crossplane-provider-keycloak-fips, spire-controller-manager,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, amazon-ssm-agent, vault-secrets-operator, cadence-fips, commercial-grafana, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, crossplane-provider-keycloak-fips, spire-controller-manager,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: flagger-fips, wazero, cadence-fips, kubernetes-csi-driver-nfs, crossplane-provider-sql-fips, aws-flb-firehose, amazon-cloudwatch-agent-operator, newrelic-nri-statsd, prometheus-podman-exporter, victoriametrics-cluster, flannel, ko-fips, esbuild,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, amazon-ssm-agent, vault-secrets-operator, cadence-fips, commercial-grafana, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, crossplane-provider-keycloak-fips, spire-controller-manager,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, amazon-ssm-agent, vault-secrets-operator, cadence-fips, commercial-grafana, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, crossplane-provider-keycloak-fips, spire-controller-manager,...

CVE-2026-34719

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the webhook model was missing a proper validation for loop back addresses, or link-local addresses — only the URL scheme HTTP/HTTPS as well as the hostname was checked. This could end up in retrieving...

Linux Distros Unpatched Vulnerability : CVE-2026-40175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in...

GHSA-Q98V-9F9W-F49Q Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

EUVD-2026-21607

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

EUVD-2026-21579

GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbound HTTP requests by providing a malicious URL via the docurl parameter during document upload...