GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kbld, kyverno-policy-reporter-ui, kapp, cert-manager-cmctl, hubble, spegel, ferretdb, kubescape-operator, litefs, pguser, ingress-nginx-controller, policy-controller, langfuse, cfssl, go-licenses, crossplane-provider-aws-firehose, kserve-modelmesh-serving,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kapp, ko, cloud-provider-gcp-cloud-controller-manager, flux, hubble, cis-operator, argo-events, kpt, kubecolor, kind, trivy, rancher-system-agent, ini-file, azure-service-operator, kubernetes-dashboard, nri-redis, wire-go, aws-otel-collector, lazydocker,...

CLEANSTART-2026-WB27241 Security fixes in kor 0.5.9-r0

Package kor version 0.5.9-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...

CLEANSTART-2026-QK08594 Security fixes in kor 0.4.2-r0

Package kor version 0.4.2-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...

CLEANSTART-2026-YC34389 Security fixes in kor 0.5.9-r1

Package kor version 0.5.9-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-IK47334 Security fixes in kor 0.3.8-r1

Package kor version 0.3.8-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-XY20765 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-63774

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TB18047 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

kor (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-55443 via langchain (0.0.110)

langchain PYPI version 0.0.110 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - kor =0.3.0, =0.4.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

kor (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-55443 via langchain (0.0.110)

langchain PYPI version 0.0.110 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - kor =0.3.0, =0.4.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

CLEANSTART-2026-ZH72202 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash

Multiple security vulnerabilities affect the kor package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. See references for individual vulnerability details...

PT-2026-56743

Multiple security vulnerabilities affect the kor package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. See references for individual vulnerability details...

CLEANSTART-2026-HV96032 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-OL12277 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-MD91760 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, ko, cis-operator, ingress-nginx-controller, k8sgpt-operator, victoriametrics-operator, go-licenses, sops, azure-service-operator, kine, wire-go, minio-operator, velero-plugin-for-csi, aws-otel-collector, terraform-provider-pagerduty,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, ko, cis-operator, ingress-nginx-controller, k8sgpt-operator, victoriametrics-operator, go-licenses, sops, azure-service-operator, kine, minio-operator, aws-otel-collector, terraform-provider-pagerduty, terraform-mcp-server, kube-bench,...

Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155480 Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...