GHSA-5GJX-96WQ-C8R2 vulnerabilities

Vulnerabilities for packages: helm...

GO-2023-2068 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2071 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2069 vulnerabilities

Vulnerabilities for packages: croc...

GO-2023-2072 vulnerabilities

Vulnerabilities for packages: croc...

GO-2025-3838 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2024-2482 vulnerabilities

Vulnerabilities for packages: goreleaser...

GO-2026-5322 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2026-4474 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-4344 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-4406 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GO-2026-4405 vulnerabilities

Vulnerabilities for packages: dagdotdev...

JLSEC-2026-1319 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...

sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server...

EUVD-2026-58501

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing...

PT-2026-72095

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper limitation of a pathname to a restricted directory allows a remote attacker to write arbitrary files. Recommendations Update IBM Db2 Mirror for i version 7.4 to a fixed release...

CVE-2026-17081: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

PT-2026-72100

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A path traversal issue exists that could allow a remote attacker to write files to arbitrary locations. Path traversal is a flaw that allows an attacker to access or manipulate files an...

Linux Distros Unpatched Vulnerability : CVE-2026-73620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout and TagReference.create, allowing attackers to pass unsafe options via kwargs...

CVE-2026-72850

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing...

CVE-2026-72841

luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...