1316 matches found
Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read
Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...
GO-2026-6223 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips...
MAL-2026-14336 Malicious code in arrayref (crates.io)
arrayref 0.3.10 was published to crates.io from a maintainer account droundy that appears to be compromised. Unlike every prior release, 0.3.10 declares a dependency on the malicious crate proc-macro1. The arrayref source itself is unchanged genuine macro code, but Cargo compiles the declared...
CVE-2026-18165
creationtimestamp| type| source ---|---|--- 2026-08-15 13:48:50+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mt4st6feps2i...
DEBIAN-CVE-2026-68463
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter on failure, avoiding the need...
GO-2026-5287 vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
GO-2026-5371 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips...
GO-2023-1840 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, policy-controller, kind...
GO-2026-5676 vulnerabilities
Vulnerabilities for packages: frp, commercial-expanso-edge, kube-metrics-adapter-fips, opentelemetry-operator, prometheus-blackbox-exporter-fips, k3s, mediamtx, kubo-fips, eks-distro-fips, kargo, kyverno-policy-reporter, ipfs-cluster-fips, opentelemetry-operator-fips, jitsucom-bulker, kubedock,...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: cosign-fips, dapr-fips, conftest, tfsec, kyverno-notation-aws, policy-controller, cosign, witness, trivy, kots, kyverno, conftest-fips, kyverno-notation-aws-fips, trivy-fips, spire-server-fips, policy-controller-fips, kyverno-fips, dapr, spire-server...
GO-2025-4245 vulnerabilities
Vulnerabilities for packages: verticadb-operator, argo-rollouts, grafana-alloy, aws-otel-collector, keda-fips, nrdot-collector-k8s, argo-rollouts-fips, k3s, verticadb-operator-fips, datadog-agent, eks-distro-fips, kargo, nats-fips, jaeger-fips, argo-workflows, jaeger, kubeflow-pipelines,...
GO-2025-3830 vulnerabilities
Vulnerabilities for packages: apko, docker-cli-buildx-fips, spire-server, aws-otel-collector, openfga-fips, tw, beats-fips, buf, apko-fips, goreleaser, nerdctl-fips, kargo, melange, trivy, zot, grype-fips, syft, docker-cli-buildx, k9s-fips, prometheus-fips, trivy-fips, nerdctl, trufflehog-fips,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: tkn, cosign-fips, dex, timestamp-authority-fips, cosign, kots, tekton-chains, vexctl, argo-workflows, cloudflared, kubescape, sops, spire-server-fips, falcoctl-fips, fulcio-fips, bank-vaults-fips, gitsign, flux-kustomize-controller, fulcio, slsa-verifier, rekor,...
GO-2026-4529 vulnerabilities
Vulnerabilities for packages: tkn, kyverno-policy-reporter-plugins-kyverno, cloudbeat, kyverno-policy-reporter-plugins-kyverno-fips, skaffold-fips, kyverno-notation-aws, commercial-chainloop-cli, crossplane-fips, commercial-chainloop-backend, tekton-chains-fips, tkn-fips, ko-fips, cloudbeat-fips,...
GO-2026-4971 vulnerabilities
Vulnerabilities for packages: azuredisk-csi-fips, crossplane-provider-aws-emr, consul, cloud-sql-proxy, drone-fips, timestamp-authority-fips, sftpgo-plugin-eventstore, nri-discovery-kubernetes-fips, podman-fips, consul-k8s, vault-secrets-webhook, zabbix-agent2, gostatsd, terragrunt-fips,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: consul, k8ssandra-operator, timestamp-authority-fips, cosign, nfs-subdir-external-provisioner, gostatsd, velero-plugin-for-csi-fips, gomplate, cni-plugins, pulumi, istio-pilot-discovery, step-issuer-fips, tekton-chains, kubernetes-event-exporter, metacontroller,...
GO-2023-2133 vulnerabilities
Vulnerabilities for packages: nats...
GO-2024-2937 vulnerabilities
Vulnerabilities for packages: hugo, ollama, hugo-extended...