EUVD-2026-65535

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

GO-2026-6237 vulnerabilities

Vulnerabilities for packages: kube-vip, cni-plugins...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-3042 vulnerabilities

Vulnerabilities for packages: podman...

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-1897 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3833 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GO-2023-2185 vulnerabilities

Vulnerabilities for packages: go...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: argo-events-fips, nemo, mattermost, backup-restore-operator, argocd-image-updater, omnictl-multiarch-fips, gitlab-rails-ce, etcd, gatekeeper, traefik, terragrunt, harbor, knative-kafka-broker, argo-events, commercial-expanso-edge, argo-cd-fips,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, cert-exporter-fips, lvm-driver-fips, boring-registry, gcp-compute-persistent-disk-csi-driver, kyverno-policy-reporter-plugins-trivy, wazero-fips, ipfs-cluster-fips, kustomize, container-object-storage-interface, istio,...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2026-5757 vulnerabilities

Vulnerabilities for packages: minio...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GO-2023-1897 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4740 vulnerabilities

Vulnerabilities for packages: flyte...

GO-2025-3845 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-4181 vulnerabilities

Vulnerabilities for packages: caddy...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, kargo, mesosphere-vsphere-csi, secrets-store-csi-driver-provider-aws, trillian, kubernetes-event-exporter, certificate-transparency, sftpgo-plugin-pubsub, trivy, vexctl, verticadb-operator, external-dns, fuse-overlayfs-snapshotter, helm,...

CVE-2026-56862 Limit handshake messages we are willing to accept post-handshake in crypto/tls

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

Photon OS 5.0: Go PHSA-2026-5.0-92-0763

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0763. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...