GO-2022-1038 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2024-3038 vulnerabilities

Vulnerabilities for packages: guac...

GO-2022-0411 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

GO-2026-5046 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, dapr, bento, splunk-otel-collector...

GO-2023-1574 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2025-3414 vulnerabilities

Vulnerabilities for packages: podman, buildah...

GO-2024-2599 vulnerabilities

Vulnerabilities for packages: mage, docker-credential-acr-env, newrelic-fluent-bit-output, prometheus-alertmanager, mockery, chartmuseum, rabbitmq-cluster-operator, dask-gateway, paranoia, kpt, nats-server, cni-plugins, helm-push, minio, aws-flb-cloudwatch, temporal-server, vertical-pod-autoscale...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: mage, gke-gcloud-auth-plugin, aws-flb-kinesis, smarter-device-manager, metrics-server, go-licenses, gobuster, kubernetes-dashboard-metrics-scraper, aactl, oras, dgraph, cni-plugins, helm-push, aws-flb-cloudwatch, vertical-pod-autoscaler, flannel-cni-plugin, go-md2man...

GO-2025-3595 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, prometheus-alertmanager, rabbitmq-cluster-operator, azcopy, temporal-server, vertical-pod-autoscaler, nodetaint, nri-kubernetes, cass-operator, opentelemetry-operator, kyverno-policy-reporter-kyverno-plugin, op-geth, yunikorn-k8shim,...

GHSA-X2R2-RVHQ-2MQV vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, geoserver...

CVE-2026-64582

creationtimestamp| type| source ---|---|--- 2026-08-14 01:02:26+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msyxjuqyyo22 2026-08-14 02:20:02+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3msz3unkaek2n 2026-08-17 01:55:23+00:00| seen|...

PT-2026-72037

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...

PT-2026-72038

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to rea...

PT-2026-72108

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...

PT-2026-72075

Name of the Vulnerable Software and Affected Versions LoRaWAN Fragmented Data Block Transport affected versions not specified Description The LoRaWAN Fragmented Data Block Transport service fails to validate the fragment counter in a received DATA FRAGMENT command before forwarding it to the...

PT-2026-72032

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the configuration and process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to...

PT-2026-72033

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...

CVE-2026-12363: Out-of-bounds Write

The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...

PT-2026-75940

Unauthenticated Path Traversal in Dashboard Session Log API Endpoints | Field | Value | | ---------------- | ----- | | Repository | ooples/token-optimizer-mcp | | Affected version | 5.0.1 commit 8137147 | | Vulnerability | CWE-22 — Improper Limitation of a Pathname to a Restricted Directory | |...