GO-2026-6223 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips, kubeflow-pipelines...

GO-2026-6114 vulnerabilities

Vulnerabilities for packages: multicluster-controlplane, dapr, kine, kcp, milvus, rancher-support-bundle-kit, dapr-fips, multicluster-controlplane-fips, kcp-fips...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-serverlessrepo, crossplane-provider-aws-opensearchserverless, crossplane-provider-aws-ssoadmin-fips, crossplane-provider-aws-kinesisanalyticsv2-fips, crossplane-provider-aws-glacier-fips, crossplane-provider-aws-account-fips,...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, flux-operator-fips, opentelemetry-operator, opentelemetry-operator-fips, cluster-api-provider-vsphere, tekton-pipelines-fips, cilium-fips, cloud-provider-vsphere, tekton-chains-fips, telegraf, livekit-cli, rancher-agent, ceph-csi-operator, tkn-fip...

GO-2026-6213 vulnerabilities

Vulnerabilities for packages: kubevela, flux-operator-fips, argo-events, snyk-cli, k9s, nuclio-controller, cloudbeat, nfpm, argo-events-fips, k9s-fips, gitea, kubescape-server, kyverno-fips, argo-workflows, amazon-ssm-agent-fips, mapotf, chainloop-cli-fips, pulumi-language-yaml,...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, policy-controller, crossplane, trivy, zarf-fips, trivy-fips, zot, teleport, cloudbeat-fips, falcoctl-fips, tekton-chains-fips, tkn-fips, falcoctl, neuvector-sigstore-interface, cloudbeat, ko-fips, ko, spire-server, teleport-operator-fips, tkn,...

GO-2026-5966 vulnerabilities

Vulnerabilities for packages: filebrowser...

GO-2026-6112 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, crossplane-provider-aws-s3, crossplane-provider-aws-iam, crossplane-provider-aws-route53, crossplane-provider-keycloak, timoni, crossplane-provider-aws-cloudfront, crossplane-provider-aws-eks, crossplane-provider-azure-managedidentity,...

GO-2026-6238 vulnerabilities

Vulnerabilities for packages: cilium, delve, hubble-ui, nerdctl, splunk-otel-collector, gitaly, k3s, witness, kubescape-operator, hubble, kuma, containerd, docker, falcoctl, kubescape, vitess...

GO-2026-6237 vulnerabilities

Vulnerabilities for packages: kube-vip, cni-plugins...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21593-1 Rating: important References: bsc1255111 bsc1266609 bsc1275024 bsc1275025 bsc1275026 bsc1275028 bsc1275029 bsc1275032 bsc1275033 bsc1275034...

PT-2026-80733

Name of the Vulnerable Software and Affected Versions OpenTelemetry-Go versions 0.11.0 through 1.44.0 Description The OpenTracing bridge contains an unsynchronized extraBaggageItems map within the bridgeSpan component. Because Go maps do not support safe concurrent read and write access,...

Security update for ctop (important)

openSUSE Security Update: Security update for ctop Announcement ID: openSUSE-SU-2026:0292-1 Rating: important References: 1248710 1257431 1265800 1266632 1267805 Cross-References: CVE-2022-21698 CVE-2024-45310 CVE-2026-10722 CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2022-21698 SUSE: 7.5...

CVE-2026-76761

A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...

CVE-2026-76760 chenhg5 cc-connect webhook.go authenticate code injection

A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and coul...

Routeglass

Routeglass - 高速ルーター・ネットワークアプライアンスフィンガープリンティングツール RouteglassはGoで書かれた高速でマルチスレッドのルーターフィンガープリンティングツールです。 プロジェクトの目標はシンプルです: 開放ポートのみに頼るのではなく、HTTPレスポンスのフィンガープリントにより、Webに露出したルーター、ファイアウォール、ゲートウェイ、組み込みネットワークデバイスを識別します。 Routeglassは現在、消費者向け、エンタープライズ向け、ISP向け、産業用ネットワーク機器をカバーする数百のフィンガープリントルールを含みます。 特徴 高速な並行スキャン...

CVE-2026-14978

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

EUVD-2026-63099

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

CVE-2026-14978

go-slug v0.4.0-v0.18.2 mishandles Unicode normalization during .terraformignore matching (CWE-176), allowing files differing only by normalization form to bypass exclusions and be uploaded to Terraform Cloud/Enterprise, exposing sensitive local files. Fixed in v0.18.3; no workaround provided. Exp...

CVE-2026-14978 Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...