GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitea, src, crossplane-provider-aws-cloudfront, docker, crossplane-provider-azure-storage, cilium-cli, k9s, tekton-chains, telegraf, wolfictl, crossplane-provider-aws-cloudformation, atlantis, crossplane-provider-aws-memorydb, buildkitd, flux-source-controller, dagge...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: flux, kyverno, k3s, prometheus, kine, backup-restore-operator, prometheus-mongodb-exporter, spire-server, minio, snyk-cli, zot, omnictl-multiarch, commercial-kyverno, commercial-grafana, upwind-agent, k3d, commercial-expanso-edge, terraform, falco-no-driver, cilium,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: kots, loki, telegraf, containerd, kine, flux, nerdctl, minio, prometheus-operator, k3d, spire-server, helm, aactl, snyk-cli, kyverno, falco-no-driver, k3s, zot, kaf...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kyverno, prometheus-mongodb-exporter, kine, cloud-provider-aws, mattermost-fips, kubernetes-fips, kyverno-fips, snyk-cli, flux-fips, frankenphp-8.2, traefik, minio-fips, osv-scanner, etcd, kubescape, nemo, harbor-fips, flux-image-automation-controller-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitea, argocd-image-updater, trivy-operator, mattermost, kaf, cilium-cli, kots, chisel, kubernetes, loki, skaffold, kubernetes-dashboard, k9s, external-dns, rancher-agent, telegraf, trivy, containerd, zarf, cloud-provider-aws, fscrypt, kine, flux, nerdctl,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: buildah, mattermost, cilium-cli, kots, loki, kubernetes, podman, kubernetes-dashboard, external-dns, rancher-agent, telegraf, containerd, cloud-provider-aws, fscrypt, kine, flux, nerdctl, minio, prometheus-operator, opentelemetry-collector, cilium, prometheus,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: go, mattermost, kaf, cilium-cli, kots, kubernetes, argo-cd, newrelic-fluent-bit-output, kubernetes-dashboard, aws-flb-firehose, ingress-nginx-controller, aws-flb-kinesis, chezmoi, libnvidia-container, cloud-provider-aws, fscrypt, kine, flux, nerdctl, hubble,...

MAL-2025-10162 Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: src, crossplane-provider-aws-cloudfront, aws-efs-csi-driver, terraform-provider-sendgrid, docker, crossplane-provider-azure-storage, cilium-cli, gitness, ip-masq-agent, grpc-health-probe, kustomize, sonobuoy, temporal-ui-server, k9s, tekton-chains,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: cadvisor, timestamp-authority, influx, prometheus-mongodb-exporter, kine, nri-discovery-kubernetes, metrics-server-fips, newrelic-infrastructure-agent, kyverno-policy-reporter-kyverno-plugin, dex-fips, caddy, request-1279, osv-scanner, kubescape,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: flux-helm-controller, secrets-store-csi-driver, kubernetes-csi-livenessprobe-fips, prometheus-mongodb-exporter, slsa-verifier, yq, metrics-server-fips, atlantis, gitness, buildkitd, newrelic-infrastructure-agent, cue, caddy, kubescape, k3d,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: src, aws-efs-csi-driver, terraform-provider-sendgrid, gitness, ip-masq-agent, atlantis, cue, memcached-exporter, prometheus-adapter, flux-source-controller, buildkitd, minio, scorecard, dynamic-localpv-provisioner, nginx-mainline, nodetaint, helm,...

phpsource.traverse.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =3D=3D Vendor: Kaf Oseo =3D=3D Product: http://guff.szub.net/quick-dirty-phpsource-printer/ =3D=3D Version: 1.0 =3D=3D Vulnerability: Filtering "../" to "" allowed...

[Full-disclosure] Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0

== Vendor: Kaf Oseo == Product: http://guff.szub.net/quick-dirty-phpsource-printer/ == Version: 1.0 == Vulnerability: Filtering "../" to "" allowed use of ".../...//" to be inserted and changed to "../" allowing directory traversal. == Fix: Use the following line instead: $file = strstr$fileget,...