GO-2026-5013 vulnerabilities

Vulnerabilities for packages: tw, crossplane-provider-aws-kms, crossplane-provider-aws-rds, gomplate, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, gptscript, melange, trivy, openbao, istio, src, terraform-provider-azapi, gitlab-runner, gitea,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, containerd, prometheus-operator, flux, terraform, snyk-cli, minio, k3d, commercial-grafana, spire-server, backup-restore-operator, kine, upwind-agent, nerdctl, elastic-agent-fips, k3s, reports-server, loki, prometheus-mongodb-exporter,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: containerd, zot, loki, telegraf, minio, spire-server, kots, kaf, kyverno, aactl, snyk-cli, k3d, nerdctl, kine, helm, flux, prometheus-operator, falco-no-driver, k3s...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-kas, flux, opentelemetry-collector, k9s-fips, frankenphp-8.4, kubernetes-fips, zarf, minio, coder-fips, zarf-fips, tekton-pipelines-fips, trivy-fips, backup-restore-operator, gitea-fips, istio, kubescape, flux-source-controller, kyverno-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: containerd, external-secrets-operator, skaffold, zot, loki, cilium-cli, telegraf, minio, rancher-agent, spire-server, trivy, cilium, istio, kots, kaf, kyverno, mattermost, gitea, external-dns, kubernetes, kubescape, opentelemetry-collector,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: containerd, external-secrets-operator, zot, loki, cilium-cli, telegraf, minio, rancher-agent, spire-server, cilium, istio, kots, kaf, kyverno, mattermost, external-dns, kubernetes, opentelemetry-collector, rancher, gitlab-kas, aactl, prometheus, snyk-cli,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, external-secrets-operator, zot, dask-gateway, cilium-cli, telegraf, go, spire-server, gitaly, kube-fluentd-operator, fuse-overlayfs-snapshotter, cilium, istio, kots, kaf, kyverno, mattermost, external-dns, kubernetes, kubescape, gitlab-pages...

MAL-2025-10162 Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

Malicious code in @zalastax/nolb-_kaf (npm)

The package @zalastax/nolb-kaf was found to contain malicious code...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cluster-proportional-autoscaler, terraform-docs, crossplane-provider-aws-kms, supercronic, crossplane-provider-aws-rds, chartmuseum, crossplane-provider-aws-sqs, docker-compose, crossplane-provider-aws-eks, envoy-ratelimit, gomplate, kubeflow-pipelines, kubevela,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: conftest-fips, argo-workflows, nri-kubernetes, crossplane-provider-gcp, restic, temporal, prometheus-adapter-fips, sonobuoy, docker-compose, grpcurl, trust-manager, helm-operator-fips, external-secrets-fips, cilium-cli, vault-k8s, prometheus-pushgateway-fips, vexctl,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: cue, flux, prometheus-pushgateway, chartmuseum, weaviate, aws-efs-csi-driver-fips, nri-prometheus, minio, prometheus-elasticsearch-exporter-fips, vault-csi-provider, trillian, cosign, aws-load-balancer-controller-fips, kubernetes-ingress-defaultbackend, kind,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gomplate, kubevela, envoy-ratelimit, nri-prometheus, src, wireguard-go, stakater-reloader, flux-kustomize-controller, aactl, dynamic-localpv-provisioner, nginx-mainline, slsa-verifier, kubeflow, kubeflow-katib, cosign, hey, pulumi-kubernetes-operator, metrics-server,...

phpsource.traverse.txt

--SLDf9lqlvOQaIe6s Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable =3D=3D Vendor: Kaf Oseo =3D=3D Product: http://guff.szub.net/quick-dirty-phpsource-printer/ =3D=3D Version: 1.0 =3D=3D Vulnerability: Filtering "../" to "" allowed...

[Full-disclosure] Directory traversal vulnerability in "Quick & Dirty PHPSource Printer" 1.0

== Vendor: Kaf Oseo == Product: http://guff.szub.net/quick-dirty-phpsource-printer/ == Version: 1.0 == Vulnerability: Filtering "../" to "" allowed use of ".../...//" to be inserted and changed to "../" allowing directory traversal. == Fix: Use the following line instead: $file = strstr$fileget,...