GO-2026-4918 vulnerabilities

Vulnerabilities for packages: nrdot-collector-k8s, eck-operator, kpt, ocm-kubernetes-controller-fips, opencost, kube-logging-logging-operator, external-secrets-operator-fips, chisel-fips, docker-compose-fips, gke-deploy, dask-gateway, trino, minc, zarf, mods, litmus-chaos-operator,...

CVE-2025-53938

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authentication Bypass vulnerability was identified in the /dao/verificarrecursoscargo.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows unauthenticated...

CVE-2025-53938

WeGIA has an authentication bypass vulnerability in the /dao/verificar_recursos_cargo.php API endpoint, affecting versions prior to 3.4.5. Unauthenticated users can access protected functionality and retrieve sensitive information by crafting HTTP requests without session cookies or tokens. Versi...