GO-2026-5013 vulnerabilities

Vulnerabilities for packages: buildah, pulumi, cilium-cli, ksops, pulumi-language-java, flux, argocd-image-updater, crossplane-provider-aws-firehose, crossplane-provider-aws-sns, ko, kots, rootlesskit, falcoctl, skaffold, src, rancher, pulumi-language-dotnet, crossplane-provider-aws-elasticache,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: telegraf, nerdctl, snyk-cli, kine, cilium, spire-server, prometheus-operator, minio, kots, terraform, omnictl-multiarch, loki, containerd, commercial-expanso-edge, flux, kyverno, k3d, omnictl-multiarch-fips, prometheus, kaf, k3s, prometheus-mongodb-exporter,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: k3s, kots, telegraf, kine, kyverno, loki, snyk-cli, aactl, nerdctl, k3d, spire-server, prometheus-operator, flux, minio, kaf, zot, containerd...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-grafana, terraform, flux-source-controller, drone-fips, kubernetes, coder, etcd, frankenphp-8.3, flux, gitea, nemo, kyverno, gatekeeper, omnictl-multiarch-fips, opentofu, argo-workflows-fips, prometheus-elasticsearch-exporter, external-secrets-operator-fip...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: telegraf, kyverno, prometheus, external-dns, cilium-cli, prometheus-operator, chisel, external-secrets-operator, cilium, flux, kaf, fscrypt, argocd-image-updater, opentelemetry-collector, k3s, kots, trivy, kine, skaffold, rancher, osv-scanner, trivy-operator, gitea,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: buildah, telegraf, kyverno, prometheus, external-dns, cilium-cli, prometheus-operator, flux, external-secrets-operator, cilium, kaf, fscrypt, opentelemetry-collector, k3s, kots, kine, rancher, docker-cli-buildx, spire-server, helm, mattermost, nerdctl,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: chezmoi, fuse-overlayfs-snapshotter, telegraf, dask-gateway, gitlab-pages, kyverno, newrelic-fluent-bit-output, external-dns, prometheus, cilium-cli, prometheus-operator, flux, external-secrets-operator, cilium, kaf, fscrypt, k3s, kots, kine, k8s-device-plugin,...

MAL-2025-10162 Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, haproxy-ingress, pulumi, grafana-agent-operator, rook, cert-exporter, cilium-cli, kubernetes-dashboard-metrics-scraper, pulumi-language-java, flux, crossplane-provider-aws-firehose, cri-tools, crossplane-provider-aws-sns, kots,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, nats, aws-efs-csi-driver, supercronic, prometheus-node-exporter-fips, crossplane-provider-aws-sns, secrets-store-csi-driver-provider-gcp, prometheus-alertmanager, ip-masq-agent, falcosidekick, cass-operator-fips-no-pvc-delete,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, vertical-pod-autoscaler, kubewatch, nats, timoni, dex, grpcurl, aws-efs-csi-driver, dynamic-localpv-provisioner, terraform, k8sgpt, kubernetes-csi-livenessprobe, flux-source-controller, prometheus-adapter-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: haproxy-ingress, pulumi, pulumi-language-java, ko, kots, kpt, skaffold, src, pulumi-language-dotnet, terraform-provider-azurerm, gomplate, oauth2-proxy, buildkitd, helm, nginx-mainline, kubescape, memcached-exporter, gke-gcloud-auth-plugin, dex, metacontroller, hugo,...

phpsource.traverse.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =3D=3D Vendor: Kaf Oseo =3D=3D Product: http://guff.szub.net/quick-dirty-phpsource-printer/ =3D=3D Version: 1.0 =3D=3D Vulnerability: Filtering "../" to "" allowed...

[Full-disclosure] Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0

== Vendor: Kaf Oseo == Product: http://guff.szub.net/quick-dirty-phpsource-printer/ == Version: 1.0 == Vulnerability: Filtering "../" to "" allowed use of ".../...//" to be inserted and changed to "../" allowing directory traversal. == Fix: Use the following line instead: $file = strstr$fileget,...