Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...

CVE-2026-18165

creationtimestamp| type| source ---|---|--- 2026-08-15 13:48:50+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mt4st6feps2i...

DEBIAN-CVE-2026-68463

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter on failure, avoiding the need...

GO-2026-5287 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

GO-2026-5371 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...

GO-2023-1840 vulnerabilities

Vulnerabilities for packages: policy-controller, kind, kubeflow-katib...

GO-2026-5676 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, kargo, k8sgateway-fips, ipfs-cluster, rke2-runtime, ipfs-cluster-fips, teleport-operator-fips, kyverno-policy-reporter-plugins-trivy, kubedock, eks-distro, syncthing, spegel, syncthing-fips, prometheus-blackbox-exporter-fips,...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: policy-controller, dapr, trivy-fips, tfsec, spire-server-fips, conftest, policy-controller-fips, kyverno-notation-aws-fips, kyverno-notation-aws, spire-server, cosign, witness, kots, conftest-fips, trivy, kyverno-fips, cosign-fips, dapr-fips, kyverno...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, aws-otel-collector, elastic-agent-fips, kargo, k8sgateway-fips, splunk-otel-collector-fips, kine, vale, datadog-agent, jaeger, datadog-agent-fips, rke2-runtime, nrdot-collector-k8s, elastic-agent, tempo, argo-rollouts-fips, eks-distro, k8sgpt,...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: openfga-fips, docker-compose-fips, trufflehog-fips, prometheus-fips, aws-otel-collector, osv-scanner, docker-compose, kargo, splunk-otel-collector-fips, buildah, falcoctl, telegraf, cadvisor, nerdctl, docker-cli-buildx, tw, elastic-agent, buildkitd-fips, trivy-fips,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: gitsign, dex, flux-kustomize-controller, cloudflared, vexctl, bank-vaults-fips, spire-server-fips, oauth2-proxy, rekor, timestamp-authority-fips, spire-server, fulcio, fulcio-fips, cosign, tkn, falcoctl-fips, slsa-verifier, kots, flux-source-controller, sops,...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, ko, kyverno-policy-reporter-plugins-kyverno, trivy-operator-fips, trivy-fips, vexctl, kyverno-policy-reporter-plugins-kyverno-fips, tekton-chains-fips, skaffold-fips, ratify, skaffold, teleport, kyverno-notation-aws-fips, kyverno-notation-aws, zot,...

GO-2026-4971 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53recoverycontrolconfig-fips, helmfile, apm-server-fips, nifikop-fips, volsync-fips, k8sgateway-fips, cloud-provider-azure-fips, nginx-kubernetes-ingress, crossplane-function-go-templating-fips, kubevela, temporal-server, aws-flb-kinesis,...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: gobump, kubevela, istio-pilot-discovery, aws-flb-kinesis, crossplane-provider-aws-cloudformation, trivy-fips, crossplane-provider-aws-kms, esbuild, dataplaneapi-fips, cue-fips, cluster-proportional-autoscaler, nri-haproxy, wave, nri-apache, kafkaexporter,...

GO-2023-2133 vulnerabilities

Vulnerabilities for packages: nats...

GO-2024-2937 vulnerabilities

Vulnerabilities for packages: ollama, hugo, hugo-extended...

GO-2026-5066 vulnerabilities

Vulnerabilities for packages: hugo, seaweedfs, rclone, mattermost...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: terragrunt, guac, gitaly, external-secrets-operator, teleport...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: wolfictl, terragrunt, tflint, zarf, zot, terraform, tfsec, grype, trivy, kots, snyk-cli, kubescape, conftest, k9s...

GO-2025-3887 vulnerabilities

Vulnerabilities for packages: headlamp, envoy-gateway, zarf, tw, flux-source-controller, pluto, cluster-api-helm-controller, kots, trivy, kubescape, flux-helm-controller, trivy-operator, kargo, chart-testing, helm-push, cerbos, helm-mapkubeapis, k8sgpt, eksctl, istio, nova, helm-operator,...