CVE-2026-16646

Vulnerability in Drupal PanKM. This issue affects PanKM versions:...

DRUPAL-CONTRIB-2026-102

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, tempo, opentelemetry-collector-fips, opentelemetry-collector-contrib, opentelemetry-collector...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: grafana-alloy, grafana-alloy-fips, opentelemetry-collector-contrib, ctop, cadvisor, gosu, syft, neuvector-scanner, neuvector-fips, kubernetes-fips, eks-distro-fips, opentelemetry-collector-contrib-fips, kubernetes, cluster-autoscaler-fips, neuvector, buildah,...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, wolfictl, cadvisor-fips, opentelemetry-collector-contrib-fips, kubernetes, opentelemetry-collector-contrib, ctop, cadvisor, buildah, grype...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: grafana-alloy, splunk-otel-collector, amazon-cloudwatch-agent, opentelemetry-collector-contrib, splunk-otel-collector-fips, sqlexporter-fips, argo-events-fips, bento, cluster-api-aws-controller-fips, telegraf, dapr-fips, vault, cluster-api-aws-controller,...

GO-2024-2911 vulnerabilities

Vulnerabilities for packages: spicedb, opentelemetry-collector, tempo, opentelemetry-collector-contrib...

GO-2024-2900 vulnerabilities

Vulnerabilities for packages: tempo, opentelemetry-collector, opentelemetry-collector-contrib...

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, grafana-alloy, sqlexporter, opentelemetry-collector-contrib...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: grafana, cri-tools, maru, malcontent, opentelemetry-collector, ollama, teleport, opentelemetry-collector-contrib, eksctl, k3s, prometheus, lazygit, tempo, dagger, dgraph, vcluster, weaviate, redpanda, terragrunt, nfpm, nuclei, mcp-grafana, kubevela, gitlab-runner,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: spire-server, falcosidekick, k3d, rqlite, k8sgpt-operator, grafana-agent-operator, certificate-transparency, kubernetes-csi-driver-hostpath, restic, cloudnative-pg, sops, opentelemetry-collector, hubble-ui, kots, step-ca, dbmate, opentelemetry-collector-contrib,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: podman, k8s-device-plugin, cadvisor, runc, kubernetes, syft, grype, docker, k3s, opentelemetry-collector-contrib, buildah, grafana-alloy, ctop, neuvector-scanner...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: cadvisor, kubernetes, grype, opentelemetry-collector-contrib, wolfictl, buildah, ctop, neuvector-scanner...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, amazon-cloudwatch-agent, opentelemetry-collector-contrib, k8sgpt, kargo, tempo, argo-rollouts, nats, grafana-alloy, kubeflow-pipelines, opentelemetry-collector, argo-workflows...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, splunk-otel-collector, bento, argo-events, jitsucom-bulker, amazon-cloudwatch-agent, opentelemetry-collector-contrib, grafana-alloy, sqlexporter...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: spire-server, py3-azure-identity, grafana-agent-operator, argo-events, rekor, bank-vaults, sops, restic, tkn, up, opentelemetry-collector, fluent-bit-plugin-loki, flux-source-controller, airflow, secrets-store-csi-driver-provider-azure, flux-image-reflector-controlle...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: spire-server, k3d, kubernetes-event-exporter, argo-events, rekor, bank-vaults, skopeo, snyk-cli, scorecard, crossplane-provider-azure-sql, sops, tkn, gitsign, opentelemetry-collector, flux-source-controller, flux-image-reflector-controller, policy-controller,...

Vulnerability in contrib module (CVE-2026-14671)

PostgreSQL refint plan cache type confusion executes arbitrary code Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the g...

Diff - Moderately critical - Access bypass - SA-CONTRIB-2026-096

This module enables you to view the differences between revisions on any entity type. The module doesn't sufficiently restrict access to non-node entity revision diffs. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to view the entity...

javapackages-tools:201801 security update

ant-contrib 1.0-0.32.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 1.0-0.31.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 1.0-0.30.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora26MassRebuild 1.0-0.29.b3 - Rebuilt for...