CVE-2026-24512 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-2PF9-VR92-6H3V vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-9H3P-52VH-959W vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-JX8C-56MG-H6VP vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-24513 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-1580 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-24514 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-4G2F-XCPH-2335 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

EUVD-2026-41372

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

CVE-2026-53357

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

PT-2026-55234

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth L2CAP socket cleanup process. The problem occurs during a race condition between l2cap sock cleanup listen and l2cap conn del. Specifically...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, flux-source-controller, podman, undock, kyverno, aactl, kyverno-notation-aws, witness, gitsign, kots, falcoctl, ratify, tekton-chains, slsa-verifier, buildah, zarf...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, flux-source-controller, podman, undock, kyverno, aactl, kyverno-notation-aws, witness, gitsign, kots, falcoctl, ratify, tekton-chains, slsa-verifier, buildah, zarf...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: kubescape, tkn, goreleaser, tekton-chains, kyverno, trivy, aactl, kyverno-notation-aws, gitsign, spire-server, tflint, trivy-operator, falcoctl, crossplane, ratify, policy-controller, neuvector-sigstore-interface, zarf...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: kubescape, tkn, goreleaser, tekton-chains, kyverno, trivy, aactl, kyverno-notation-aws, gitsign, spire-server, tflint, trivy-operator, falcoctl, crossplane, ratify, policy-controller, neuvector-sigstore-interface, zarf...

CVE-2026-53332

A flaw was found in the Linux kernel's Qualcomm NGD Next Generation Display controller qcom-ngd-ctrl component. This vulnerability arises from a race condition where callbacks are registered before the NGD device is fully initialized. This can lead to the callbacks operating on uninitialized data...

foreman: Foreman: Information disclosure via improper validation of nested request parameters

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: skopeo-fips, slsa-verifier, zarf, kyverno, podman-fips, witness, kots, ratify, kubescape-server, portieris-fips, tekton-chains, flux-source-controller-fips, prometheus-podman-exporter-fips, chainctl, falcoctl-fips, tekton-chains-fips, kyverno-notation-aws, kubescape,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: skopeo-fips, slsa-verifier, zarf, kyverno, podman-fips, witness, kots, ratify, kubescape-server, portieris-fips, tekton-chains, flux-source-controller-fips, prometheus-podman-exporter-fips, chainctl, falcoctl-fips, tekton-chains-fips, kyverno-notation-aws, kubescape,...