Nginx UI code-related vulnerabilities

Nginx UI is a web interface for Nginx developed by Jacky. Versions of Nginx UI 2.3.4 and earlier have code vulnerabilities. This vulnerability allows authenticated users to create cluster nodes that point to arbitrary internal URLs and send API requests with the X-Node-ID header, resulting in SSR...

Google Cloud AlloyDB for PostgreSQL security vulnerabilities

Google Cloud AlloyDB for PostgreSQL is a cloud-native, high-performance relational database service from Google Inc. That service is compatible with PostgreSQL. Versions of Google Cloud AlloyDB for PostgreSQL prior to 2025-11-03 contained a security vulnerability. This vulnerability stemmed from...

CVE-2026-42600

Summary of the vulnerability (CVE-2026-42600) : MinIO’s ReadMultiple internode storage-REST endpoint is vulnerable to path traversal when processing a msgpack-encoded ReadMultipleReq body. An attacker holding the cluster root JWT can craft a request to POST /minio/storage/{drivePath}/v63/rmpl wit...

CVE-2026-42600: Improper Limitation of a Pathname to a Restricted Directory

MinIO is a high-performance object storage system. From RELEASE.2022-07-24T01-54-52Z to before RELEASE.2026-04-14T21-32-45Z, A path traversal vulnerability in MinIO's ReadMultiple internode storage-REST endpoint allows a caller holding the cluster root JWT to read files from outside the configure...

MinIO path traversal vulnerability

MinIO is an open-source object storage server developed by the American company MinIO. This product supports the creation of infrastructures for machine learning, analysis, and application data workloads. Versions of MinIO from RELEASE.2022-07-24T01-54-52Z to RELEASE.2026-04-14T21-32-45Z had a pa...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017453 advisory. Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017456 advisory. Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.26 and prior. Difficult to explo...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: runc, hubble, knative-serving, k3s, telegraf, fluent-bit-plugin-loki, istio, kube-fluentd-operator, kubernetes, aws-flb-kinesis, cilium-cli, minio, nerdctl, zarf, prometheus-operator, juicefs, k8s-device-plugin, kots, flux, prometheus, grafana-alloy, kubevela,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: runc, hubble, knative-serving, k3s, telegraf, fluent-bit-plugin-loki, istio, kube-fluentd-operator, kubernetes, aws-flb-kinesis, cilium-cli, minio, nerdctl, zarf, prometheus-operator, juicefs, k8s-device-plugin, kots, flux, prometheus, grafana-alloy, kubevela,...

CVE-2026-39825 vulnerabilities

Vulnerabilities for packages: kaf, argo-cd, authentik, kubedock-fips, terraform-fips, seaweedfs-rocksdb, istio-fips, kubevela, seaweedfs-fips, kyverno, kyverno-fips, datadog-agent-fips, kubernetes, kubernetes-dashboard, dapr, oauth2-proxy-fips, harbor, ansible-operator-fips, virt-operator,...

GHSA-H74G-238J-357M vulnerabilities

Vulnerabilities for packages: kaf, argo-cd, authentik, kubedock-fips, terraform-fips, seaweedfs-rocksdb, istio-fips, kubevela, seaweedfs-fips, kyverno, kyverno-fips, datadog-agent-fips, kubernetes, kubernetes-dashboard, dapr, oauth2-proxy-fips, harbor, ansible-operator-fips, virt-operator,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: kaf, google-cloud-otel-ops-collector, virt-api-fips, argo-cd, crossplane-provider-aws-ec2-fips, cosign-fips, gotrue, kubevela, seaweedfs-fips, metrics-server, kyverno-fips, dataplaneapi-fips, dapr, azure-service-operator, crossplane-provider-aws-sagemaker, harbor,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: kaf, google-cloud-otel-ops-collector, virt-api-fips, argo-cd, crossplane-provider-aws-ec2-fips, cosign-fips, gotrue, kubevela, seaweedfs-fips, metrics-server, kyverno-fips, dataplaneapi-fips, dapr, azure-service-operator, crossplane-provider-aws-sagemaker, harbor,...

CVE-2026-39820 vulnerabilities

Vulnerabilities for packages: kaf, google-cloud-otel-ops-collector, virt-api-fips, argo-cd, crossplane-provider-aws-ec2-fips, cosign-fips, gotrue, kubevela, seaweedfs-fips, metrics-server, kyverno-fips, dataplaneapi-fips, dapr, azure-service-operator, crossplane-provider-aws-sagemaker, harbor,...

CVE-2026-42499 vulnerabilities

Vulnerabilities for packages: kaf, google-cloud-otel-ops-collector, virt-api-fips, argo-cd, crossplane-provider-aws-ec2-fips, cosign-fips, gotrue, kubevela, seaweedfs-fips, metrics-server, kyverno-fips, dataplaneapi-fips, dapr, azure-service-operator, crossplane-provider-aws-sagemaker, harbor,...

CVE-2026-42501 vulnerabilities

Vulnerabilities for packages: gatekeeper, telegraf, kubernetes, kube-arangodb, tetragon, manifest-tool, aws-otel-collector, nri-postgresql, flyte, k3d, terraform-provider-tls, ko, apko, prometheus-operator, kube-logging-operator, step-issuer, step-ca, gostatsd, k8s-device-plugin, rancher-helm,...

GHSA-XQ5J-9R39-C3VF vulnerabilities

Vulnerabilities for packages: gatekeeper, telegraf, kubernetes, flyte, ko, prometheus-operator, k8s-device-plugin, kots, grafana-pyroscope, grafana-alloy, dask-gateway, act, grafana-operator, aactl, falco-no-driver, argo-cd, kubernetes-csi-external-attacher, containerd, teleport, slsa-verifier,...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: gatekeeper, telegraf, kubernetes, kube-arangodb, tetragon, manifest-tool, aws-otel-collector, nri-postgresql, flyte, k3d, terraform-provider-tls, ko, apko, prometheus-operator, kube-logging-operator, step-issuer, step-ca, gostatsd, k8s-device-plugin, rancher-helm,...

GHSA-QC64-M6C2-V4X7 vulnerabilities

Vulnerabilities for packages: gatekeeper, telegraf, kubernetes, kube-arangodb, tetragon, manifest-tool, aws-otel-collector, nri-postgresql, flyte, k3d, terraform-provider-tls, ko, apko, prometheus-operator, kube-logging-operator, step-issuer, step-ca, gostatsd, k8s-device-plugin, rancher-helm,...

GHSA-P9H5-JM8X-MJM5 vulnerabilities

Vulnerabilities for packages: gatekeeper, telegraf, kubernetes, flyte, ko, prometheus-operator, k8s-device-plugin, kots, grafana-pyroscope, grafana-alloy, dask-gateway, act, grafana-operator, aactl, falco-no-driver, argo-cd, kubernetes-csi-external-attacher, containerd, teleport, slsa-verifier,...