69 matches found
termshark
Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...
openSUSE 16 Security Update : go1.25-openssl (openSUSE-SU-2026:21696-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21696-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: -...
CVE-2019-25766
A flaw was found in Renovate. During certain Go Modules update failure scenarios, temporary repository tokens are inadvertently leaked into pull request comments. A remote attacker able to view these comments could obtain the exposed tokens, leading to unauthorized access to repositories. This...
CVE-2019-25766
Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...
EUVD-2019-20202
Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...
CVE-2019-25766 Renovate before 19.38.7 Credential Exposure via Go Modules
Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...
GHSA-XPHW-4F88-5F39 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, kueue-fips, drone-fips, cephcsi-fips, aws-iam-authenticator-fips, crossplane-provider-aws-appautoscaling, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-gcp-beta-cloudplatform,...
GO-2024-2937 vulnerabilities
Vulnerabilities for packages: gotenberg, chainctl, ollama, hugo, hugo-extended...
GO-2024-2453 vulnerabilities
Vulnerabilities for packages: pulumi-language-yaml, crossplane-provider-aws-dynamodb, crossplane-provider-family-aws, crossplane-provider-aws-cloudfront, aactl, crossplane-provider-aws-memorydb, tekton-chains, terragrunt, apko, flux-kustomize-controller, gitsign, gitness,...
GO-2026-4867 vulnerabilities
Vulnerabilities for packages: renovate, mattermost, cni-plugins, datadog-agent, vault-k8s, argo-cd, rancher-agent, secrets-store-csi-driver-provider-azure, blobfuse2, coredns, grafana-operator, nri-f5, karpenter, aws-application-networking-k8s, influx, gofumpt, howdy-yall, redka,...
GO-2026-4526 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-eks, datadog-agent, aws-otel-collector, nuclei, crossplane-provider-family-azure, crossplane-provider-aws-route53, crossplane-provider-aws-dynamodb, crossplane-provider-azure-storage, grafana-alloy, crossplane-provider-aws-cloudwatchlogs,...
GO-2024-2887 vulnerabilities
Vulnerabilities for packages: rook, kwok, secrets-store-csi-driver-provider-azure, rabbitmq-default-user-credential-updater, terraform-provider-google, controller-gen, ksops, regclient, velero-plugin-for-aws, fuse-overlayfs-snapshotter, extism, newrelic-infra-operator, caddy, harbor-scanner-trivy...
UBUNTU-CVE-2026-56864
A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...
EUVD-2026-58514
A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...
JetBrains GoLand < 2026.2 Multiple Vulnerabilities
The version of JetBrains GoLand installed on the remote host is prior to 2026.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration CVE-2026-64802 - In...
CVE-2026-64802
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...
EUVD-2026-48227
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...
CVE-2026-64802
Technical details about CVE-2026-64802 are not publicly provided in the supplied documents. Monitor for updates from JetBrains and NVD; no specifics on affected versions, vectors, or fixes are available here.
CVE-2026-64802
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...
GoLand -- Multiple vulnerabilities
https://www.jetbrains.com/privacy-security/issues-fixed/ reports: In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default...