GO-2026-5013 vulnerabilities

Vulnerabilities for packages: syft, argocd-image-updater, docker-compose, witness, slsa-verifier, k9s, dagger, external-secrets-operator, pulumi-language-java, tkn, docker, glab, tw, flux-image-automation-controller, nuclei, crossplane-provider-family-aws, osv-scanner, argo-cd,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: cilium, cert-manager, kots, kyverno, commercial-grafana, k3s, commercial-expanso-edge, omnictl-multiarch, reports-server, kaf, minio, kine, prometheus, loki, terraform, containerd, k3d, elastic-agent-fips, nerdctl, flux, omnictl-multiarch-fips, aactl, snyk-cli,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: prometheus-operator, kine, spire-server, kyverno, telegraf, k3s, kaf, snyk-cli, loki, minio, containerd, k3d, kots, nerdctl, zot, aactl, flux...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kubescape, traefik, kubernetes-dashboard, kaf, chisel-fips, seaweedfs-rocksdb, kine, prometheus, loki, terraform, tekton-pipelines-fips, grafana, cloudbeat-fips, k9s, nemo, knative-kafka-broker, harbor, flux-fips, frankenphp-8.4, gitlab-workhorse-ce, k9s-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium, istio, spire-server, telegraf, argocd-image-updater, trivy, cert-manager, kubernetes, kubernetes-dashboard, skaffold, nerdctl, zot, falco-no-driver, kine, chisel, flux-source-controller, trivy-operator, k3s, kaf, k9s, loki, containerd,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium, istio, spire-server, telegraf, docker-cli-buildx, cert-manager, kubernetes, kubernetes-dashboard, nerdctl, zot, falco-no-driver, kine, k3s, kaf, loki, containerd, external-secrets-operator, prometheus, helm, aactl, prometheus-operator, rancher, gitlab-kas,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: cilium, istio, spire-server, aws-flb-cloudwatch, telegraf, cert-manager, kubernetes, kubernetes-dashboard, newrelic-fluent-bit-output, nerdctl, zot, falco-no-driver, kine, gitlab-pages, k8s-device-plugin, coredns, k3s, kaf, karpenter, external-secrets-operator,...

MAL-2025-10162 Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: syft, docker-compose, aws-load-balancer-controller, secrets-store-csi-driver-provider-gcp, capslock, slsa-verifier, k9s, dagger, volume-modifier-for-k8s, nri-discovery-kubernetes, kube-logging-operator, pulumi-language-java, newrelic-infrastructure-agent, tkn, docker...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, wavefront-collector-for-kubernetes, kubescape, timestamp-authority, hubble-ui-backend-fips, trillian-fips, metallb, secrets-store-csi-driver-provider-azure, kine, request-1279, rqlite, dynamic-localpv-provisioner, kube-fluentd-operator,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: falcoctl, wavefront-collector-for-kubernetes, trillian, kubescape, secrets-store-csi-driver-provider-gcp, kubernetes-ingress-defaultbackend, kubernetes-dashboard, kubernetes-csi-livenessprobe-fips, kaf, stakater-reloader, metacontroller, trust-manager,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-gcp, nginx-mainline, slsa-verifier, git-lfs, pulumi-language-java, newrelic-infrastructure-agent, prometheus-adapter, fuse-overlayfs-snapshotter, ollama, kubeflow-katib, nats, wireguard-go, weaviate, skaffold, buildkitd, rqlite,...

phpsource.traverse.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =3D=3D Vendor: Kaf Oseo =3D=3D Product: http://guff.szub.net/quick-dirty-phpsource-printer/ =3D=3D Version: 1.0 =3D=3D Vulnerability: Filtering "../" to "" allowed...

[Full-disclosure] Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0

== Vendor: Kaf Oseo == Product: http://guff.szub.net/quick-dirty-phpsource-printer/ == Version: 1.0 == Vulnerability: Filtering "../" to "" allowed use of ".../...//" to be inserted and changed to "../" allowing directory traversal. == Fix: Use the following line instead: $file = strstr$fileget,...