GO-2026-4918 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-athena, prometheus-bind-exporter, eks-distro, victoriametrics-operator-fips, secrets-store-csi-driver-provider-azure-fips, cluster-api-aws-controller, terraform-provider-azapi-fips, crossplane-provider-aws-cloudsearch-fips, oauth2-proxy-fips,...

CVE-2025-53938

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authentication Bypass vulnerability was identified in the /dao/verificarrecursoscargo.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows unauthenticated...

CVE-2025-53938

WeGIA has an authentication bypass vulnerability in the /dao/verificar_recursos_cargo.php API endpoint, affecting versions prior to 3.4.5. Unauthenticated users can access protected functionality and retrieve sensitive information by crafting HTTP requests without session cookies or tokens. Versi...