GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tw, crossplane-provider-aws-kms, crossplane-provider-aws-rds, gomplate, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, gptscript, melange, trivy, openbao, istio, src, terraform-provider-azapi, gitlab-runner, gitea,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: zot, minio, snyk-cli, terraform, omnictl-multiarch-fips, falco-no-driver, cert-manager, loki, telegraf, kyverno, flux, aactl, elastic-agent-fips, spire-server, backup-restore-operator, nerdctl, cilium, k3s, k3d, prometheus-mongodb-exporter, prometheus-operator,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: containerd, zot, loki, telegraf, minio, spire-server, kots, kaf, kyverno, aactl, snyk-cli, k3d, nerdctl, kine, helm, flux, prometheus-operator, falco-no-driver, k3s...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: tigera-operator, frankenphp-8.5, kube-state-metrics, zot, kube-conformance, snyk-cli, gitlab-workhorse-ce-fips, flux-fips, mattermost, knative-serving, knative-kafka-broker-fips, flux, gitlab-workhorse-ce, gitea, kyverno-fips, grafana-fips, trivy-operator,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: containerd, external-secrets-operator, skaffold, zot, loki, cilium-cli, telegraf, minio, rancher-agent, spire-server, trivy, cilium, istio, kots, kaf, kyverno, mattermost, gitea, external-dns, kubernetes, kubescape, opentelemetry-collector,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: containerd, external-secrets-operator, zot, loki, cilium-cli, telegraf, minio, rancher-agent, spire-server, cilium, istio, kots, kaf, kyverno, mattermost, external-dns, kubernetes, opentelemetry-collector, rancher, gitlab-kas, aactl, prometheus, snyk-cli,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, external-secrets-operator, zot, dask-gateway, cilium-cli, telegraf, go, spire-server, gitaly, kube-fluentd-operator, fuse-overlayfs-snapshotter, cilium, istio, kots, kaf, kyverno, mattermost, external-dns, kubernetes, kubescape, gitlab-pages...

MAL-2025-10162 Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, terraform-docs, crossplane-provider-aws-kms, supercronic, crossplane-provider-aws-rds, chartmuseum, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, envoy-ratelimit, gomplate, kubeflow-pipelines, kubevela,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, secrets-store-csi-driver-provider-aws, docker-compose, pulumi-language-yaml, bank-vaults, cass-operator-fips, metallb, crossplane-provider-aws-cloudwatchlogs, guac, scorecard, crossplane-provider-azure-storage, grype, k3d,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kube-state-metrics, zot, slsa-verifier, nodetaint, pulumi-language-yaml, trust-manager, bank-vaults, metrics-server-fips, aws-load-balancer-controller-fips, prometheus-mongodb-exporter-fips, falcoctl-fips, flux, aws-load-balancer-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gomplate, kubevela, envoy-ratelimit, nri-prometheus, src, wireguard-go, stakater-reloader, flux-kustomize-controller, aactl, dynamic-localpv-provisioner, nginx-mainline, slsa-verifier, kubeflow, kubeflow-katib, cosign, hey, pulumi-kubernetes-operator, metrics-server,...

phpsource.traverse.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =3D=3D Vendor: Kaf Oseo =3D=3D Product: http://guff.szub.net/quick-dirty-phpsource-printer/ =3D=3D Version: 1.0 =3D=3D Vulnerability: Filtering "../" to "" allowed...

[Full-disclosure] Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0

== Vendor: Kaf Oseo == Product: http://guff.szub.net/quick-dirty-phpsource-printer/ == Version: 1.0 == Vulnerability: Filtering "../" to "" allowed use of ".../...//" to be inserted and changed to "../" allowing directory traversal. == Fix: Use the following line instead: $file = strstr$fileget,...