GHSA-2PF9-VR92-6H3V vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-9H3P-52VH-959W vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-JX8C-56MG-H6VP vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-24513 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-1580 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

CVE-2026-24514 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

GHSA-4G2F-XCPH-2335 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...

EUVD-2026-41372

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

CVE-2026-53357

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2capsockcleanuplisten vs l2capconndel btacceptdequeue unlinks a not-yet-accepted child from the parent accept queue and releasesocks it before returning, so the returned sk has no caller reference and is...

PT-2026-55234

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth L2CAP socket cleanup process. The problem occurs during a race condition between l2cap sock cleanup listen and l2cap conn del. Specifically...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, flux-source-controller, podman, undock, kyverno, aactl, kyverno-notation-aws, witness, gitsign, kots, falcoctl, ratify, tekton-chains, slsa-verifier, buildah, zarf...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: kubescape, skopeo, flux-source-controller, podman, undock, kyverno, aactl, kyverno-notation-aws, witness, gitsign, kots, falcoctl, ratify, tekton-chains, slsa-verifier, buildah, zarf...

CVE-2026-49835 vulnerabilities

Vulnerabilities for packages: kubescape, tkn, goreleaser, tekton-chains, kyverno, trivy, aactl, kyverno-notation-aws, gitsign, spire-server, tflint, trivy-operator, falcoctl, crossplane, ratify, policy-controller, neuvector-sigstore-interface, zarf...

GHSA-9C54-X2G4-V92J vulnerabilities

Vulnerabilities for packages: kubescape, tkn, goreleaser, tekton-chains, kyverno, trivy, aactl, kyverno-notation-aws, gitsign, spire-server, tflint, trivy-operator, falcoctl, crossplane, ratify, policy-controller, neuvector-sigstore-interface, zarf...

CVE-2026-53332

A flaw was found in the Linux kernel's Qualcomm NGD Next Generation Display controller qcom-ngd-ctrl component. This vulnerability arises from a race condition where callbacks are registered before the NGD device is fully initialized. This can lead to the callbacks operating on uninitialized data...

foreman: Foreman: Information disclosure via improper validation of nested request parameters

A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomyscope controller method does not properly validate organization and location IDs from nested request parameters,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: skopeo-fips, slsa-verifier, zarf, kyverno, podman-fips, witness, kots, ratify, kubescape-server, portieris-fips, tekton-chains, flux-source-controller-fips, prometheus-podman-exporter-fips, chainctl, falcoctl-fips, tekton-chains-fips, kyverno-notation-aws, kubescape,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: skopeo-fips, slsa-verifier, zarf, kyverno, podman-fips, witness, kots, ratify, kubescape-server, portieris-fips, tekton-chains, flux-source-controller-fips, prometheus-podman-exporter-fips, chainctl, falcoctl-fips, tekton-chains-fips, kyverno-notation-aws, kubescape,...

CVE-2026-53339

In the Linux kernel, the following vulnerability has been resolved: i2c: qcom-cci: Fix NULL pointer dereference in cciremove On all modern platforms Qualcomm CCI controller provides two I2C masters, and on particular boards only one I2C master may be initialized, and in such cases the device...