GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: kyverno, kine, telegraf, aactl, zitadel, prometheus-operator, k3s, snyk-cli, loki, k3d, cert-manager, zot, flux, kots, prometheus-mongodb-exporter, spire-server, elastic-agent-fips, prometheus, kaf, containerd, terraform, reports-server, nerdctl, cilium,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: spire-server, k3s, minio, k3d, kaf, prometheus-operator, flux, containerd, kyverno, aactl, kine, loki, telegraf, snyk-cli, zot, kots, nerdctl...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, fscrypt, coder, knative-serving, kube-state-metrics, kyverno-fips, drone, snyk-cli, k9s-fips, k9s, kube-arangodb-fips, vitess, argo-cd, gitea, kubernetes-dashboard, chisel-fips, opentelemetry-collector, knative-serving-fips, kots, spire-server,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: trivy, zarf, chisel, argocd-image-updater, gitlab-kas, containerd, external-dns, kubernetes, minio, cilium, rancher, spire-server, k3s, gitea, trivy-operator, cilium-cli, kine, knative-serving, helm, flux-image-automation-controller, istio, prometheus, osv-scanner,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, docker-cli-buildx, containerd, external-dns, kubernetes, minio, cilium, rancher, spire-server, k3s, cilium-cli, kine, knative-serving, helm, istio, prometheus, kaf, kyverno, loki, podman, telegraf, snyk-cli, zot, kots, cert-manager, fscrypt,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: coredns, falco-no-driver, gitlab-kas, kube-arangodb, external-dns, karpenter, kubernetes, cilium, cilium-envoy, gitaly, k3s, spire-server, k8s-device-plugin, fuse-overlayfs-snapshotter, hubble, cilium-cli, kine, kube-fluentd-operator, redka, aws-flb-firehose,...

MAL-2025-10162 Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: trivy, zarf, php-fpmexporter, crossplane-provider-family-aws, falcosidekick, up, cert-exporter, metacontroller, prometheus-adapter, tekton-chains, ip-masq-agent, external-dns, kuberay-operator, crossplane-provider-aws-memorydb, spire-server, k8sgpt,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, tekton-chains, crossplane-provider-family-aws, kargo, vexctl, k8sgpt-operator, cosign, pulumi-language-dotnet, crossplane-provider-aws-rds, haproxy-ingress, step, step-ca, external-secrets-fips, chartmuseum,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s-fips, tekton-chains, dynamic-localpv-provisioner, azure-aad-pod-identity-mic, k8sgpt-operator, secrets-store-csi-driver-provider-gcp, sigstore-scaffolding, kube-state-metrics, cosign, pulumi-language-dotnet, kind, flux-helm-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: metacontroller, prometheus-adapter, ip-masq-agent, nginx-stable, mc, frp, haproxy-ingress, hugo, kind, pulumi, metrics-server, cue, sigstore-scaffolding, certificate-transparency, newrelic-infrastructure-agent, secrets-store-csi-driver, flux-kustomize-controller,...

phpsource.traverse.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =3D=3D Vendor: Kaf Oseo =3D=3D Product: http://guff.szub.net/quick-dirty-phpsource-printer/ =3D=3D Version: 1.0 =3D=3D Vulnerability: Filtering "../" to "" allowed...

[Full-disclosure] Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0

== Vendor: Kaf Oseo == Product: http://guff.szub.net/quick-dirty-phpsource-printer/ == Version: 1.0 == Vulnerability: Filtering "../" to "" allowed use of ".../...//" to be inserted and changed to "../" allowing directory traversal. == Fix: Use the following line instead: $file = strstr$fileget,...