58988 matches found
CVE-2026-73490
A flaw was found in Loofah. The HTML5 sanitizer incorrectly applies its local-reference restriction only to the xlink:href attribute on SVG use and feImage elements, while browsers also accept the plain href attribute. A remote attacker could exploit this by crafting a sanitized SVG that referenc...
CVE-2026-69101
Datavane TIS v5.0.0 is affected by an XXE injection via the doEditWorkflow endpoint. The issue arises because XML is parsed using an unhardened DocumentBuilderFactory with external entities and DTD loading enabled, enabling authenticated attackers to perform SSRF and out-of-band file exfiltration...
CVE-2026-69101 Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpoint
Datavane TIS v5.0.0 contains an XML external entity XXE injection vulnerability that allows authenticated attackers to perform server-side request forgery and out-of-band file exfiltration by supplying a crafted taskScript payload to the doEditWorkflow endpoint, which processes XML through an...
GO-2026-5889 vulnerabilities
Vulnerabilities for packages: external-dns-fips, external-dns...
GO-2026-5723 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-5377 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-5602 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-5738 vulnerabilities
Vulnerabilities for packages: external-dns-fips, k8sgateway-fips, k8sgateway, external-dns...
GO-2024-2632 vulnerabilities
Vulnerabilities for packages: mc-fips, spire-server, boring-registry, external-secrets-fips, minio-fips, falcoctl, falcoctl-fips, boring-registry-fips, minio, spire-server-fips, mc...
GO-2024-2454 vulnerabilities
Vulnerabilities for packages: kubescape, spire-server, boring-registry, external-secrets-fips, tekton-chains, gitsign, cosign-fips, falcoctl, falcoctl-fips, vexctl, minio, spire-server-fips, mc...
GO-2026-5693 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, upwind-agent, grafana, grafana-fips, argo-cd-fips, external-secrets-operator-fips, teleport, kyverno, flux-fips, gitaly, gitlab-rails-ce-fips, guac, nemo, external-secrets-operator, terragrunt, terragrunt-fips, flux, argo-cd...
GO-2026-5543 vulnerabilities
Vulnerabilities for packages: cert-manager-google-cas-issuer, gitlab-runner-fips, ldap2pg, cert-manager-openshift-routes-fips, flux-source-controller, seaweedfs-rocksdb-fips, terraform, minio, trufflehog-fips, dex, terraform-fips, cert-manager-csi-driver-fips, yunikorn-k8shim-fips, openbao-fips,...
GO-2024-2611 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, kubernetes-dashboard-fips, melange, flux-source-controller, terraform, rabbitmq-cluster-operator, dex, cadvisor, argo-workflows-fips, syft, kube-rbac-proxy-fips, buf, atlantis, kine, kyverno-policy-reporter, kaf, boring-registry,...
GO-2023-1988 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, prometheus-node-exporter-fips, aactl, fuse-overlayfs-snapshotter, flux-source-controller, terraform, prometheus-pushgateway, stakater-reloader, metrics-server, minio, aws-load-balancer-controller, dex, hey, zot, yq, kaf,...
GO-2024-2631 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-fips, aactl, melange, sigstore-scaffolding-fips, gitsign, flux-source-controller, minio, dex, step-ca, argo-workflows-fips, kube-rbac-proxy-fips, dex-fips, zot, gomplate-fips, timestamp-authority-fips, fulcio-fips, bank-vaults-fips,...
GO-2026-4864 vulnerabilities
Vulnerabilities for packages: aactl, fuse-overlayfs-snapshotter, buildkite-agent-fips, karpenter-fips, newrelic-fluent-bit-output, terraform, mattermost-fips, nvidia-nsight-compute-13.4, istio-fips, gatekeeper, commercial-chainloop-cli, terraform-fips, argo-workflows-fips, gitlab-rails-ce-fips,...
GO-2026-5014 vulnerabilities
Vulnerabilities for packages: aactl, flux-source-controller, seaweedfs-rocksdb-fips, calico-fips, terraform, frankenphp-8.4, mattermost-fips, coder, gatekeeper, minio, chisel-fips, argo-workflows-fips, trivy-operator-fips, vitess, gitlab-rails-ce-fips, nemo, zot, etcd-fips, kine, opentofu, kaf,...
GO-2025-3553 vulnerabilities
Vulnerabilities for packages: wal-g, aactl, distribution-fips, sigstore-scaffolding-fips, velero-plugin-for-microsoft-azure-fips, gitsign, flux-source-controller, terraform, velero-plugin-for-microsoft-azure, opencost, minio, opentelemetry-collector-contrib, openfga-fips, trufflehog-fips, mc-fips...
