CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitea-fips, ceph-csi-operator, prometheus-pgbouncer-exporter-fips, weaviate, kyverno-policy-reporter-ui-fips, mongo-tools-fips, kubo-fips, tekton-pipelines-fips, ko-fips, litestream, prometheus-adapter-fips, crossplane-provider-aws-cloudsearch,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: croc, hubble, dynamic-localpv-provisioner, lvm-driver, kyverno, headlamp, jaeger-operator, witness, azcopy, crossplane-provider-azure-authorization, ko, cloudprober, tigera-operator, harbor-registry, incert, mongo-tools, buildkitd, chisel, nri-haproxy, rancher-helm,...

Security update for cloudflared (important)

openSUSE security update: security update for cloudflared ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20893-1 Rating: important References: bsc1234582 bsc1239422 bsc1253918 bsc1265920 bsc1266794 Cross-References: CVE-2024-45337 CVE-2025-22869...

OPENSUSE-SU-2026:20893-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 Add more information to proxy-dns removal message Update tail command to use /management/logs endpoint Add cloudflared management token command Fix bugs Update golang.org/x/net to 0.55.0...

cloudflared-2026.5.2-1.1 on GA media (moderate)

cloudflared-2026.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10908-1 Rating: moderate Cross-References: CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:...

OPENSUSE-SU-2026:10908-1 cloudflared-2026.5.2-1.1 on GA media

These are all security issues fixed in the cloudflared-2026.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

Summary Multiple functions conduct substring-only matching to validate hostnames to which basic authorization should be sent. An attacker can append the matched substrings to an attacker-controlled endpoint and capture authentication. Details api/services/website/cacheAddress.js,...

PT-2026-7491

A stack-use-after-return issue exists in the Arduino Core STM32 library prior to version 1.7.0. The pwm start function allocates a TIM HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the functi...

cloudflared-2025.11.1-1.1 on GA media (moderate)

cloudflared-2025.11.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15763-1 Rating: moderate Cross-References: CVE-2025-22869 CVE-2025-58181 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2...

OPENSUSE-SU-2025:15763-1 cloudflared-2025.11.1-1.1 on GA media

These are all security issues fixed in the cloudflared-2025.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

Unleashing the Kraken ransomware group

In August 2025, Cisco Talos observed big-game hunting and double extortion attacks carried out by Kraken, a Russian-speaking group that has emerged from the remnants of the HelloKitty ransomware cartel. Talos observed in one intrusion that the Kraken actor exploited Server Message Block SMB...

EUVD-2021-1103

Malware in sbrugna...

EUVD-2023-0926

Malicious code in bioql PyPI...

Malicious code in cloudflared-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6406 Malicious code in cloudflared-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: gitness, rclone, gogatekeeper, cloudflared, step, caddy, sftpgo, step-ca, buf, step-issuer, karma, tkn, kyverno-policy-reporter-ui...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: dapr, sftpgo, step-fips, kyverno-policy-reporter-ui-fips, caddy-fips, gitness, cloudflared, step-ca-fips, tkn, step-issuer-fips, caddy, karma, step-issuer, rclone, buf, gogatekeeper, step, tkn-fips, kyverno-policy-reporter-ui, rclone-fips, telegraf, dapr-fips, step-c...

cloudflared-2024.12.1-1.1 on GA media (moderate)

cloudflared-2024.12.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14585-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

OPENSUSE-SU-2024:14585-1 cloudflared-2024.12.1-1.1 on GA media

These are all security issues fixed in the cloudflared-2024.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-PX8V-PP82-RCVR vulnerabilities

Vulnerabilities for packages: caddy, eks-distro, cloudflared, traefik-fips, traefik, caddy-fips, kubernetes-dns-node-cache, eks-distro-fips, q, k3s, spegel, buf, frp, kubernetes-dns-node-cache-fips...