GO-2025-3465 vulnerabilities

Vulnerabilities for packages: argo-rollouts, spark-operator, rancher-webhook, emissary, kapp, aws-efs-csi-driver, nodetaint, rancher-fleet, kubernetes, local-static-provisioner, argocd-image-updater, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, yunikorn-k8shim, ip-masq-agent,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux, flyte, sops, argo-events, py3-cassandra-medusa, grafana-mimir, goreleaser, k8sgpt, sqlpad, wal-g, tekton-chains, pulumi, airflow, buildkitd, restic, falcoctl, guac, opentelemetry-collector-contrib, chezmoi, rekor, cortex, nuclei, thanos, zot, terragrunt,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: gosu, kaf, cadvisor, logstash-exporter, oras, k3s, nri-prometheus, dask-gateway, wireguard-go, newrelic-infrastructure-agent, dagger, grype, kustomize, kuberay-operator, shfmt, kube-state-metrics, nri-cassandra, nri-memcached, src, kyverno-policy-reporter, hubble-ui,...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, stern, pluto, rancher-system-agent, crossplane-provider-aws-route53, whereabouts, mcp-grafana, conftest, crossplane-provider-aws-ec2, direnv, chart-testing, ipfs-cluster, azure-workload-identity-webhook, gostatsd,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: sops, terraform-provider-grafana, argo-events, snyk-cli, kserve, kubeflow, crossplane-provider-aws-route53, k3s, dask-gateway, nri-prometheus, descheduler, kuberay-operator, conftest, apisix-ingress-controller, kube-state-metrics, rekor, litestream, mattermost,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: kaf, kubeflow, pulumi-language-dotnet, k3s, nri-prometheus, wireguard-go, newrelic-infrastructure-agent, kube-state-metrics, src, trust-manager, runc, crossplane-provider-aws, rqlite, weaviate, trillian, kubernetes-csi-external-resizer, chartmuseum, gobuster,...

GO-2026-6061 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, rancher-system-agent, snyk-cli, pulumi-language-dotnet, crossplane-provider-aws-route53, newrelic-infrastructure-agent, mcp-grafana, aws-network-policy-agent, conftest, crossplane-provider-aws-ec2, ipfs-cluster,...

GO-2026-5970 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, stern, kaf, op-geth, grafana-mimir, rancher-system-agent, k8s-device-plugin, pulumi-language-dotnet, snyk-cli, crossplane-provider-aws-route53, k3s, descheduler, dagger, kustomize, mcp-grafana, conftest, apisix-ingress-controller, teleport...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: sops, kaf, argo-events, grafana-mimir, k8s-device-plugin, k3s, dask-gateway, dagger, teleport, conftest, litestream, mattermost, gitaly, runc, zarf, kyverno, gitlab-pages, gatekeeper, grafana, tempo, harbor, k8ssandra-client, sftpgo-plugin-pubsub, falco-no-driver,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: sops, gosu, kaf, argo-events, grafana-mimir, k8s-device-plugin, kubeflow, k3s, nri-prometheus, dask-gateway, dagger, nats-server-config-reloader, shfmt, conftest, teleport, litestream, mattermost, cargobump, gitaly, runc, rancher-system-upgrade-controller, zarf,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: stern, pluto, snyk-cli, oras, whereabouts, newrelic-infrastructure-agent, mcp-grafana, aws-network-policy-agent, direnv, chart-testing, ipfs-cluster, azure-workload-identity-webhook, gostatsd, kubernetes-csi-external-resizer, grafana, nginx-prometheus-exporter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: sops, rancher-system-agent, kubeflow, k3s, whereabouts, dask-gateway, descheduler, kustomize, kuberay-operator, conftest, litestream, extism, mattermost, neuvector-sigstore-interface, src, crossplane-provider-aws-ec2, hubble-ui, aws-privateca-issuer,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: argo-events, pluto, rancher-system-agent, terraform-provider-azapi, k3s, nats-server-config-reloader, conftest, nri-memcached, src, neuvector-sigstore-interface, aws-privateca-issuer, kubernetes-csi-external-health-monitor, chart-testing, ipfs-cluster,...

CVE-2026-73479

CVE-2026-73479 affects dua-cli. When printing marked file paths after exiting the TUI, it fails to filter OSC/CSI terminal escape sequences, allowing crafted file names to cause escape-sequence interpretation by the terminal emulator. Potential impacts include title spoofing and clipboard manipul...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CVE-2026-73036 Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.toml

Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...