GO-2026-6061 vulnerabilities

Vulnerabilities for packages: gitea, wolfictl, goreleaser, k8sgpt-operator, grafana-alloy, juicefs, gcp-compute-persistent-disk-csi-driver, spicedb-operator, amass, db-operator, ferretdb, rancher-agent, gcsfuse, yunikorn-k8shim, kyverno, velero, rancher, gitlab-kas, hubble-ui, argo-cd, task,...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: cue, vault-k8s, k8sgpt-operator, yq, flux-helm-controller, kaf, kubernetes-csi-external-resizer, timoni, prometheus-adapter, spark-operator, cosign, bom, bank-vaults, flux-image-automation-controller, flux-source-controller, dgraph, kubeflow-katib, kubewatch,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: hubble, migrate, kubernetes-csi-driver-nfs, mattermost, goreleaser, octo-sts, grafana-alloy, juicefs, k8ssandra-client, prometheus, temporal-server, coredns, step-issuer, aws-flb-firehose, kaf, prometheus-adapter, thanos, teleport, atlantis, kyverno,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: cue, local-static-provisioner, haproxy-ingress, goreleaser, vault-k8s, k8sgpt-operator, spicedb-operator, mongodb-kubernetes-operator, kaf, sbom-convert, nri-redis, rancher-fleet, amass, timoni, db-operator, vale, rancher-agent, gcsfuse, yunikorn-k8shim,...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: hubble, local-static-provisioner, migrate, kubernetes-csi-driver-nfs, mattermost, haproxy-ingress, goreleaser, octo-sts, grafana-alloy, regclient, juicefs, k8ssandra-client, gosu, prometheus, nats, temporal-server, coredns, govulncheck, step-issuer, aws-flb-firehose,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: hubble, local-static-provisioner, kubernetes-csi-driver-nfs, mattermost, verticadb-operator, redis-operator, nri-haproxy, boring-registry, goreleaser, wave, vault-k8s, octo-sts, sbomqs, juicefs, openbao-k8s, percona-server-mongodb-operator, crossplane-provider-aws-ec...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: hubble, migrate, kubernetes-csi-driver-nfs, nri-haproxy, grafana-alloy, regclient, prometheus, docker-credential-gcr, nri-redis, ip-masq-agent, mockgen, fzf, wire-go, gcsfuse, neuvector-sigstore-interface, spark-operator, render-template, yunikorn-k8shim,...

CVE-2026-73479

CVE-2026-73479 affects dua-cli. When printing marked file paths after exiting the TUI, it fails to filter OSC/CSI terminal escape sequences, allowing crafted file names to cause escape-sequence interpretation by the terminal emulator. Potential impacts include title spoofing and clipboard manipul...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

CVE-2026-73479 dua-cli Terminal Escape Sequence Injection via Marked Paths

dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface. Attackers can craft file names containing OSC/CSI escape sequences that are interpreted by the terminal emulator when printed, enabling title spoofing, clipboard manipulation, or oth...

SUSE CVE-2026-68209

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

CLEANSTART-2026-IK70425 Security fixes in kubernetes-csi-external-snapshotter 8.6.0-r4

Package kubernetes-csi-external-snapshotter version 8.6.0-r4 fixes 1 vulnerabilities: CVE-2026-39822...

CLEANSTART-2026-OT46541 Security fixes in secrets-store-csi-driver-fips 1.6.0-r1

Package secrets-store-csi-driver-fips version 1.6.0-r1 fixes 5 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-41178, CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-LB37339 Security fixes in kubernetes-csi-external-resizer-fips 2.2.1-r1

Package kubernetes-csi-external-resizer-fips version 2.2.1-r1 fixes 1 vulnerabilities: CVE-2026-46600...

CVE-2026-73036 Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.toml

Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...

CVE-2026-68209

A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...

CVE-2026-68209

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

DEBIAN-CVE-2026-68209

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

UBUNTU-CVE-2026-68209

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...

CVE-2026-68209

In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffers...