GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin, dask-gateway, external-dns, nri-haproxy, kine, nri-couchbase, sbomqs, chisel, custom-pod-autoscaler, kapp, govulncheck, opencost, kserve-modelmesh-serving, crossplane-provider-sql, frp, src-fingerprint, vault-k8s, vault-secrets-webhook,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wire-go, cerbos, nri-haproxy, rclone, kubernetes-csi-external-health-monitor, kapp, portieris, kapp-controller, undock, zot, falcoctl, polaris, hubble, kubernetes-dashboard-api, nginx-prometheus-exporter, wal-g, k8sgateway, lazydocker, nuclei, helm-operator, nodetain...

CLEANSTART-2026-WB27241 Security fixes in kor 0.5.9-r0

Package kor version 0.5.9-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...

CLEANSTART-2026-YC34389 Security fixes in kor 0.5.9-r1

Package kor version 0.5.9-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-IK47334 Security fixes in kor 0.3.8-r1

Package kor version 0.3.8-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-QK08594 Security fixes in kor 0.4.2-r0

Package kor version 0.4.2-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, CVE-2025-22868...

CLEANSTART-2026-XY20765 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TB18047 Security fixes for CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 0.6.7-r0

Multiple security vulnerabilities affect the kor package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH72202 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash

Multiple security vulnerabilities affect the kor package. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. See references for individual vulnerability details...

CLEANSTART-2026-HV96032 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-OL12277 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CLEANSTART-2026-MD91760 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

Multiple security vulnerabilities affect the kor package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. See references for individual vulnerability details...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, juicefs-csi-driver, direnv, op-geth, portieris, verticadb-operator, crossplane-provider-aws-firehose, atlantis, etcd, hubble, cadvisor, kubernetes-dashboard-api, nginx-prometheus-exporter, sftpgo-plugin-auth, kserve-rest-proxy,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, juicefs-csi-driver, direnv, overmind, op-geth, portieris, fluent-operator, verticadb-operator, crossplane-provider-aws-firehose, atlantis, etcd, hubble, cadvisor, kubernetes-dashboard-api, nginx-prometheus-exporter,...

Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155480 Malicious code in guras-visa-kor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d1795d1084058a94779daa431e62e8229e4d45fdad0fdc7c7e131db0bc7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: wire-go, cerbos, nri-haproxy, rclone, kubernetes-csi-external-health-monitor, kapp, portieris, kapp-controller, undock, zot, falcoctl, polaris, hubble, kubernetes-dashboard-api, nginx-prometheus-exporter, wal-g, k8sgateway, lazydocker, nuclei, helm-operator, nodetain...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: monstache, nri-redis, gatekeeper, gobuster, hubble, k3d, flux-operator, linkerd2-cni-plugin, yunikorn-k8shim, guac, ip-masq-agent, cis-operator, helm-operator, cloud-sql-proxy, fzf, kapp-controller, rclone, clickhouse-operator, tkn, google-osconfig-agent, mongo-tools...

kor-rada.gov.ua XSS vulnerability

Open Bug Bounty ID: OBB-702360 Description| Value ---|--- Affected Website:| kor-rada.gov.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

foobar2000 1.3.8 - .m3u Local Crash (PoC)

foobar2000 1.3.8 - .m3u Local Crash PoC Exploit Title: foobar2000 1.3.8 .m3u Local Crash PoC Date: 12-06-2015 Exploit Author: 0neb1n Vendor Homepage: http://www.foobar2000.org/ Software Link: http://www.foobar2000.org/getfile/e246984718ab7ab58fa1e0b072ff05a4/foobar2000v1.3.8.exe Version: 1.3.8...