87 matches found
GO-2024-2682 vulnerabilities
Vulnerabilities for packages: q, caddy, k3s, cloudflared...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: frp, kubernetes-dns-node-cache, buf, q, spegel, cloudflared, k3s, caddy...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: gitness, kyverno-policy-reporter-ui, step, tkn, buf, karma, cloudflared, gogatekeeper, step-ca, step-issuer, sftpgo, caddy, rclone...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: gitsign, terragrunt, vexctl, cosign, oauth2-proxy, tekton-chains, dex, tkn, kots, flux-kustomize-controller, sops, flux-source-controller, spire-server, argo-workflows, cloudflared, fulcio, rekor, aactl, kubescape, slsa-verifier...
cloudflared v2026.8.1
Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...
cloudflared v2026.7.3
Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...
CVE-2026-42505 vulnerabilities
Vulnerabilities for packages: dagdotdev, aws-eks-pod-identity-agent-fips, logstash-exporter-fips, bento-fips, mediamtx, prometheus-statsd-exporter, kube-logging-operator-custom-runner-fips, crossplane-provider-aws-osis, crossplane-provider-aws-waf-fips, dkron-fips, nri-mongodb-fips,...
CVE-2026-42505 vulnerabilities
Vulnerabilities for packages: zarf, ytt, aws-flb-cloudwatch, pdfcpu, kubernetes-csi-external-attacher, crossplane-provider-aws-iam, rancher-system-agent, step, sops, spicedb, ingress-nginx-controller, rekor, sealed-secrets, neuvector-scanner, pinact, rancher, falco-exporter, controller-gen, crane...
Security update for cloudflared (important)
openSUSE security update: security update for cloudflared ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20893-1 Rating: important References: bsc1234582 bsc1239422 bsc1253918 bsc1265920 bsc1266794 Cross-References: CVE-2024-45337 CVE-2025-22869...
OPENSUSE-SU-2026:20893-1 Security update for cloudflared
This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 Add more information to proxy-dns removal message Update tail command to use /management/logs endpoint Add cloudflared management token command Fix bugs Update golang.org/x/net to 0.55.0...
cloudflared-2026.5.2-1.1 on GA media (moderate)
cloudflared-2026.5.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10908-1 Rating: moderate Cross-References: CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:...
OPENSUSE-SU-2026:10908-1 cloudflared-2026.5.2-1.1 on GA media
These are all security issues fixed in the cloudflared-2026.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis
Summary Multiple functions conduct substring-only matching to validate hostnames to which basic authorization should be sent. An attacker can append the matched substrings to an attacker-controlled endpoint and capture authentication. Details api/services/website/cacheAddress.js,...
PT-2026-7491
A stack-use-after-return issue exists in the Arduino Core STM32 library prior to version 1.7.0. The pwm start function allocates a TIM HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the functi...
cloudflared: undisclosed vulnerability (ZAI-2026-3PJNXU)
Not disclosed. Details are not yet publicly disclosed...
cloudflared: undisclosed vulnerability (ZAI-2026-5W62VZ)
Not disclosed. Details are not yet publicly disclosed...
cloudflared-2025.11.1-1.1 on GA media (moderate)
cloudflared-2025.11.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15763-1 Rating: moderate Cross-References: CVE-2025-22869 CVE-2025-58181 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2...
OPENSUSE-SU-2025:15763-1 cloudflared-2025.11.1-1.1 on GA media
These are all security issues fixed in the cloudflared-2025.11.1-1.1 package on the GA media of openSUSE Tumbleweed...
Unleashing the Kraken ransomware group
In August 2025, Cisco Talos observed big-game hunting and double extortion attacks carried out by Kraken, a Russian-speaking group that has emerged from the remnants of the HelloKitty ransomware cartel. Talos observed in one intrusion that the Kraken actor exploited Server Message Block SMB...
