GO-2025-3942 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, k8sgateway, cloudflared, juicefs...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: frp, spegel, ipfs-cluster, kyverno-policy-reporter-ui, kargo, k8sgateway, dkron, kubernetes-dns-node-cache, kubo, k3s, q, traefik, caddy...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, kubeflow-pipelines, local-static-provisioner, cri-tools, kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, spark-operator, argocd-image-updater, aws-efs-csi-driver, nodetaint, ip-masq-agent...

GO-2025-4233 vulnerabilities

Vulnerabilities for packages: frp, spegel, buf, ipfs-cluster, kargo, k8sgateway, dkron, kubernetes-dns-node-cache, kubo, seaweedfs, k3s, q, traefik, caddy...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, kubeflow-pipelines, local-static-provisioner, kubernetes-dns-node-cache, argocd-image-updater, aws-efs-csi-driver, nodetaint, ip-masq-agent...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, kubernetes-dns-node-cache, spark-operator, aws-efs-csi-driver, nodetaint, ip-masq-agent...

GO-2024-3302 vulnerabilities

Vulnerabilities for packages: frp, spegel, buf, cloudflared, kubernetes-dns-node-cache, k3s, q, caddy...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argo-cd, prometheus, flux-kustomize-controller, crossplane-provider-aws-cloudfront, nuclei, cilium, traefik, crossplane-provider-aws-memorydb, chezmoi, nerdctl, sealed-secrets, argo-events, crossplane-provider-keycloak, pulumi-language-yaml,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, nri-redis, swagger, flux-kustomize-controller, cortex, crossplane-provider-aws-cloudfront, falco-no-driver, hydra, kubernetes-csi-external-attacher, git-credential-oauth, metacontroller, rancher-loglevel, newrelic-fluent-bit-output, traefik,...

RLSA-2026:54509 Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

SUSE CVE-2026-73508

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns.AbstractDnsRecord, io.netty.handler.codec.dns.DefaultDnsRecordDecoder.decodeRecord, and io.netty.handler.codec.dns.DnsCodecUtil.decompressDomainName failed to...

EUVD-2026-58504

Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass DNS pinning protections through DNS rebinding attacks. Attackers can configure hostnames that resolve to public...

Oracle Linux 8 : bind9.16 (ELSA-2026-54509)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54509 advisory. - Fix NSEC3 signer validation CVE-2026-10723 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Fix CVE-2026-11622: reference-counted DNS cac...

Golang 1.25.x < 1.25.13 / 1.26.x < 1.26.6 Multiple Vulnerabilities

The version of Golang running on the remote host is 1.25.x prior to 1.25.13, or 1.26.x prior to 1.26.6. It is, therefore, affected by multiple vulnerabilities in the standard library and the toolchain, as referenced in the golang-announce advisory. - The ToASCII and ToUnicode functions incorrectl...

Oracle Linux 9 : bind (ELSA-2026-54510)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54510 advisory. - Fix NSEC3 signer validation CVE-2026-10723 - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion...

Linux Distros Unpatched Vulnerability : CVE-2026-73508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns.AbstractDnsRecord,...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing

A flaw was found in Erlang OTP publickey. This improper certificate validation vulnerability allows a subordinate Certificate Authority CA with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name SAN but contains a craft...