GO-2026-5418 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: osv-scanner, zot, pulumi-language-dotnet, flux-source-controller, trivy-operator, pulumi, kubescape, external-secrets-operator, rancher-fleet, grafana-alloy, kaniko, argo-workflows, trivy, witness, grype, gitaly, chezmoi, trufflehog, wolfictl, k9s, gitsign, scorecard...

GO-2026-5618 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GO-2025-3720 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: zot, flux-source-controller, pulumi, falcoctl, kubescape, thanos, timestamp-authority, druid, flux-image-reflector-controller, buildkitd, argo-workflows, trivy, wal-g, chezmoi, flux-kustomize-controller, fluent-bit-plugin-loki, opentelemetry-collector, cosign, fulcio...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: oras, addon-resizer, temporal-server, thanos, kubernetes-csi-external-snapshotter, yunikorn-web, kubernetes-csi-external-attacher, dynamic-localpv-provisioner, podman, cert-exporter, nfs-subdir-external-provisioner, openfga, pdfcpu, snyk-cli, trillian,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: oras, paranoia, s5cmd, temporal-server, gitness, thanos, crossplane-provider-azure, influx, kind, temporal-ui-server, cluster-proportional-autoscaler, hey, dgraph, doppler-kubernetes-operator, dynamic-localpv-provisioner, gh, speedtest-go, kubernetes-csi-livenessprob...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, paranoia, addon-resizer, terraform-provider-acme, temporal-server, calico, rancher-fleet, grafana-alloy, temporal-ui-server, cluster-proportional-autoscaler, glab, dgraph, litestream, descheduler, dynamic-localpv-provisioner,...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, bom, aactl, kubernetes-dashboard, kpt...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, terraform-provider-acme, glab, chezmoi, crossplane-provider-aws-rds, gh, opentelemetry-collector, fscrypt, fulcio, podman, traefik, scorecard, cloudflared, cloud-provider-aws, snyk-cli, syft, terraform-provider-tls, gitlab-runner,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: chisel, osv-scanner, yunikorn-k8shim, paranoia, s5cmd, calico, gitness, influx, git-sync, temporal-ui-server, hey, doppler-kubernetes-operator, kubernetes-csi-external-attacher, litestream, descheduler, dynamic-localpv-provisioner, crossplane-provider-aws-rds, swagge...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: zot, crossplane-provider-azure-storage, terraform, k3s, flux-source-controller, pulumi, falcoctl, kubescape, timestamp-authority, crossplane-provider-azure, crossplane-provider-family-azure, flux-image-reflector-controller, buildkitd, glab, flux-kustomize-controller,...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: zot, flux-source-controller, falcoctl, kubescape, wolfictl, gitsign, vexctl, policy-controller, neuvector-sigstore-interface, ko, apko, tekton-chains, melange, tkn, goreleaser, slsa-verifier, aactl, skaffold, spire-server, zarf...

CVE-2026-46603: Memory Allocation with Excessive Size Value

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...

CVE-2026-46603: Memory Allocation with Excessive Size Value

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...

Linux Distros Unpatched Vulnerability : CVE-2026-73415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in...

The vulnerability in the `src/runtime/server/og-image/context.ts` file of the Open Graph Image generation module from the Nuxt OG Image framework for creating web applications and sites allows attackers to perform spoofing attacks.

The vulnerability in the src/runtime/server/og-image/context.ts file of the Open Graph Image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites, relates to the loading of external, unreliable data alongside reliable data. Exploiting this...

CVE-2026-13196: Out-of-bounds Write

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

PT-2026-72054

Name of the Vulnerable Software and Affected Versions golang.org/x/image/vp8l affected versions not specified Description VP8L decoding in the golang.org/x/image/vp8l package can allocate an excessive amount of memory when processing a specially crafted VP8L image that contains numerous unused...

PT-2026-76039

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...