Contour 代码注入漏洞

Contour is an open-source Kubernetes ingress controller that uses Envoy proxies. Versions of Contour from v1.19.0 to v1.33.4, v1.32.5 before v1.32.5, and v1.31.6 before v1.31.6 had a code injection vulnerability. This vulnerability stemmed from the Cookie rewriting feature, which was vulnerable t...

PT-2026-34726

Name of the Vulnerable Software and Affected Versions Contour versions 1.19.0 through 1.31.5 Contour versions 1.32.0 through 1.32.4 Contour versions 1.33.0 through 1.33.3 Description The Cookie Rewriting feature is susceptible to Lua code injection. An attacker with RBAC permissions to create or...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: net-kourier, timoni, pulumi-language-yaml, spqr, cloudnative-pg, grafana, amazon-cloudwatch-agent-operator, kubernetes-dashboard-api, rook, flux, argo-rollouts, mc, flannel, promxy, nerdctl, temporal, snyk-cli, flux-image-automation-controller,...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, flux, promxy, knative-serving, gitea, flux-source-controller, minio-object-browser, terraform-docs, crossplane-provider-azure-sql, trufflehog, scorecard, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, mountpoint-s3-csi-driver, k8sgateway...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: net-kourier, multus-cni, flux, promxy, knative-serving, gitea, flux-source-controller, minio-object-browser, terraform-docs, crossplane-provider-azure-sql, trufflehog, scorecard, fuse-overlayfs-snapshotter, mesosphere-vsphere-csi, mountpoint-s3-csi-driver, k8sgateway...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, onepassword-operator, cloud-sql-proxy, k8ssandra-operator, timestamp-authority-fips, sftpgo-plugin-eventstore, podman-fips, helm-exporter, consul-k8s, gitlab-cng, vault-secrets-webhook, cosign, velero-plugin-for-csi-fips, dcgm-exporter,...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, onepassword-operator, cloud-sql-proxy, k8ssandra-operator, timestamp-authority-fips, sftpgo-plugin-eventstore, podman-fips, helm-exporter, consul-k8s, gitlab-cng, vault-secrets-webhook, cosign, velero-plugin-for-csi-fips, dcgm-exporter,...

OPENSUSE-SU-2026:20235-1 Security update for fontforge

This update for fontforge fixes the following issues: Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing bsc1256013. - CVE-2025-15269: remote code execution via use-after-free in SFD file parsing bsc1256032...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: go-bindata, promxy, minio-object-browser, terraform-docs, elvish, rancher-telemetry, wazero, scorecard, timescaledb-tune, mesosphere-vsphere-csi, k8sgateway, cert-manager-webhook-pdns, cfssl, kuberlr, trivy, tfsec, istio, chisel, bom, velero-plugin-for-csi,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: go-bindata, promxy, minio-object-browser, terraform-docs, elvish, rancher-telemetry, wazero, scorecard, timescaledb-tune, mesosphere-vsphere-csi, k8sgateway, cert-manager-webhook-pdns, cfssl, kuberlr, trivy, tfsec, istio, chisel, bom, velero-plugin-for-csi,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

CVE-2025-61725 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, cluster-api-provider-vsphere, metacontroller, jitsucom-bulker,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: ipfs-cluster, sbom-scorecard, nats, wait-for-port, kafkaexporter, timoni, spqr, ini-file, extism, go-bindata, kubeflow, infinispan-operator, argo-rollouts, distribution, skopeo, mc, promxy, nerdctl, nodetaint, cluster-api-provider-vsphere, metacontroller,...