cloudflared

Client Cloudflare Tunnel Contiene il client a riga di comando per Cloudflare Tunnel, un daemon di tunneling che inoltra il traffico dalla rete Cloudflare alle tue origini. Questo daemon si trova tra la rete Cloudflare e la tua origine ad es. un server web. Cloudflare attira le richieste dei clien...

GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, verticadb-operator, amazon-cloudwatch-agent, cluster-api-fips, aws-node-termination-handler-fips, virt-handler, amazon-ssm-agent-fips, kubernetes, juicefs-csi-driver, cosmo-router, rke2-runtime-fips, milvus, op-geth, cloudflared-fips,...

GO-2026-4289 vulnerabilities

Vulnerabilities for packages: cloudflared-fips, eks-distro-fips, eks-distro, cloudflared...

GO-2024-2785 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, cloudflared...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, cloudflared-fips, kubernetes-dns-node-cache-fips, k8sgateway, k8sgateway-fips, cloudflared, eks-distro, eks-distro-fips...

GO-2024-2682 vulnerabilities

Vulnerabilities for packages: caddy-fips, caddy, q, k3s, cloudflared...

GO-2024-2785 vulnerabilities

Vulnerabilities for packages: cloudflared, juicefs, kubernetes-dns-node-cache...

GO-2025-3942 vulnerabilities

Vulnerabilities for packages: cloudflared, juicefs, k8sgateway, kubernetes-dns-node-cache...

GO-2026-4289 vulnerabilities

Vulnerabilities for packages: cloudflared...

GO-2024-2682 vulnerabilities

Vulnerabilities for packages: q, k3s, caddy, cloudflared...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: karma, caddy, step-ca, rclone, gitness, gogatekeeper, step, tkn, cloudflared, kyverno-policy-reporter-ui, buf, sftpgo, step-issuer...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: q, k3s, caddy, frp, spegel, kubernetes-dns-node-cache, cloudflared, buf...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: flux-source-controller, tekton-chains, tkn, rekor, kubescape, flux-kustomize-controller, oauth2-proxy, kots, vexctl, gitsign, slsa-verifier, aactl, argo-workflows, sops, spire-server, terragrunt, cosign, cloudflared, dex, fulcio...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-amp, k8sgateway, kube-oidc-proxy, tflint, kubernetes-dashboard-metrics-scraper-fips, kubernetes-csi-driver-nfs, kubescape-http-request-fips, amass, aws-s3-controller, redis-operator-fips, spegel-fips, databricks-cli, controller-gen,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: gitaly, zarf, fuse-overlayfs-snapshotter, croc, kube-arangodb, neuvector-scanner, cert-manager-csi-driver, secrets-store-csi-driver-provider-gcp, cloud-provider-aws, dgraph, secrets-store-csi-driver, ctop, knative-serving, ratify, dkron,...

Security update for cloudflared (important)

openSUSE security update: security update for cloudflared ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20893-1 Rating: important References: bsc1234582 bsc1239422 bsc1253918 bsc1265920 bsc1266794 Cross-References: CVE-2024-45337 CVE-2025-22869...

OPENSUSE-SU-2026:20893-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 Add more information to proxy-dns removal message Update tail command to use /management/logs endpoint Add cloudflared management token command Fix bugs Update golang.org/x/net to 0.55.0...

cloudflared-2026.5.2-1.1 on GA media (moderate)

cloudflared-2026.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10908-1 Rating: moderate Cross-References: CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:...

OPENSUSE-SU-2026:10908-1 cloudflared-2026.5.2-1.1 on GA media

These are all security issues fixed in the cloudflared-2026.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis

Summary Multiple functions conduct substring-only matching to validate hostnames to which basic authorization should be sent. An attacker can append the matched substrings to an attacker-controlled endpoint and capture authentication. Details api/services/website/cacheAddress.js,...