CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, docker-cli-buildx, vexctl, gitsign, slsa-verifier, buildkitd, aactl,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kyverno, docker, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, sigstore-scaffolding, docker-cli-buildx, vexctl, gitsign, slsa-verifier, buildkitd, aactl,...

Digital Photo Frame GH-WDF10A vulnerable to improper access restriction

Overview Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains the following vulnerability. Active debug code CWE-489 - CVE-2026-33201 Koki Takase reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

CVE-2026-33201

The Digital Photo Frame GH-WDF10A from GREEN HOUSE CO., LTD. contains an active debug code vulnerability. Exploitation can read/write files or configurations on the device, or arbitrarily execute files with root privileges. CVSS data from the connected CVE entry indicates high impact on confident...

CVE-2026-33201

Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code vulnerability. If this vulnerability is exploited, files or configurations on the affected device may be read or written, or arbitrary files may be executed with root privileges...

CVE-2025-58190 affecting package gh for versions less than 2.62.0-13

CVE-2025-58190 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2026-23991 affecting package gh for versions less than 2.62.0-13

CVE-2026-23991 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2026-23992 affecting package gh for versions less than 2.62.0-13

CVE-2026-23992 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-47911 affecting package gh for versions less than 2.62.0-13

CVE-2025-47911 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-11065 affecting package gh for versions less than 2.62.0-13

CVE-2025-11065 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

Fedora 42 : gh (2026-de52e7caa1)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-de52e7caa1 advisory. Update to 2.87.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 43 : gh (2026-21a2f3709a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-21a2f3709a advisory. Update to 2.87.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Ubuntu: Security Advisory (USN-8012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-76958 CVE-2025-58190 affecting package gh 2.62.0-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76955 CVE-2025-47911 affecting package gh 2.62.0-10

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76863 CVE-2025-47911 affecting package gh for versions less than 2.13.0-26

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CVE-2026-23831 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server, falcoctl, goreleaser, trivy, ratify,...

GHSA-273P-M2CW-6833 vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server, falcoctl, goreleaser, trivy, ratify,...

GHSA-4C4X-JM2X-PF9J vulnerabilities

Vulnerabilities for packages: kyverno, flux-source-controller, ko, tekton-chains, zarf, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, tflint, vexctl, gitsign, slsa-verifier, buildkitd, aactl, spire-server, falcoctl, goreleaser, trivy, ratify,...

CVE-2026-24137 vulnerabilities

Vulnerabilities for packages: kyverno, undock, flux-source-controller, ko, docker-compose, tekton-chains, zarf, xeol, policy-controller, kyverno-notation-aws, crossplane, tkn, neuvector-sigstore-interface, kubescape, rekor, tflint, podman, sigstore-scaffolding, kots, buildah, gitsign, vexctl,...