CVE-2026-56852 affecting package kured for versions less than 1.15.0-6

CVE-2026-56852 affecting package kured for versions less than 1.15.0-6. A patched version of the package is available...

AZL-93228 CVE-2026-56852 affecting package kured for versions less than 1.15.0-6

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CLEANSTART-2026-DG85765 Security fixes for CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, ghsa-pc3f-x583-g7j2 applied in versions: 1.20.0-r0

Multiple security vulnerabilities affect the kured package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-39821 affecting package kured for versions less than 1.15.0-5

CVE-2026-39821 affecting package kured for versions less than 1.15.0-5. A patched version of the package is available...

AZL-87984 CVE-2026-39821 affecting package kured for versions less than 1.15.0-5

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

CVE-2026-35469 affecting package kured for versions less than 1.15.0-4

CVE-2026-35469 affecting package kured for versions less than 1.15.0-4. A patched version of the package is available...

AZL-85688 CVE-2026-35469 affecting package kured for versions less than 1.15.0-5

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...

CVE-2025-11065 affecting package kured for versions less than 1.15.0-3

CVE-2025-11065 affecting package kured for versions less than 1.15.0-3. A patched version of the package is available...

CVE-2025-11065 affecting package kured for versions less than 1.14.2-7

CVE-2025-11065 affecting package kured for versions less than 1.14.2-7. A patched version of the package is available...

AZL-75452 CVE-2025-11065 affecting package kured for versions less than 1.15.0-3

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

AZL-75500 CVE-2025-11065 affecting package kured for versions less than 1.14.2-7

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...

kured-1.20.0-1.1 on GA media (moderate)

kured-1.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15505-1 Rating: moderate Cross-References: CVE-2024-34156 CVSS scores: CVE-2024-34156 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2025:15505-1 kured-1.20.0-1.1 on GA media

These are all security issues fixed in the kured-1.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

kured-1.17.1-1.1 on GA media (moderate)

kured-1.17.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14907-1 Rating: moderate Cross-References: CVE-2024-45338 CVSS scores: CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45338 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14907-1 kured-1.17.1-1.1 on GA media

These are all security issues fixed in the kured-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-45288 affecting package kured for versions less than 1.15.0-2

CVE-2023-45288 affecting package kured for versions less than 1.15.0-2. A patched version of the package is available...

CVE-2023-45288 affecting package kured for versions less than 1.14.2-3

CVE-2023-45288 affecting package kured for versions less than 1.14.2-3. A patched version of the package is available...

AZL-38284 CVE-2023-45288 affecting package kured for versions less than 1.15.0-2

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-39445 CVE-2023-45288 affecting package kured for versions less than 1.14.2-3

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt (CVE-2022-32149)

The version of application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the...