30384 matches found
GO-2024-3321 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, k8sgpt, kube-logging-logging-operator, ko, prometheus-bind-exporter, fulcio, eks-distro, temporal, terraform-provider-google, nats-server, cilium-cli, secrets-store-csi-driver-provider-azure-fips, undock, velero-plugin-for-microsoft-azure, kubescape...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: fulcio, zarf, k8sgpt, grpc-health-probe, spicedb, kots, terragrunt, kubernetes-csi-driver-hostpath, dbmate, ksops, melange, kaniko, opentelemetry-collector, falcosidekick, vcluster, gomplate, conftest, k3s, opentelemetry-collector-contrib, restic, kube-rbac-proxy,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: go-licenses, crossplane, zarf, k8sgpt, apko, k9s, kots, melange, wolfictl, kaniko, grafana-alloy, src-fingerprint, bom, pulumi-language-dotnet, chezmoi, task, flux-source-controller, gitsign, grype, snyk-cli, zot, pulumi, gitea, pulumi-language-java, trivy, gptscript...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: nfpm, crossplane, zarf, apko, k9s, kots, kyverno, melange, wolfictl, kaniko, trufflehog, argo-cd, rancher-fleet, teleport, gomplate, grafana-alloy, src-fingerprint, bom, pulumi-language-dotnet, chezmoi, flux-source-controller, gitsign, grype, external-secrets-operato...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: go-licenses, crossplane, zarf, k8sgpt, apko, k9s, kots, melange, wolfictl, kaniko, grafana-alloy, src-fingerprint, bom, pulumi-language-dotnet, chezmoi, task, flux-source-controller, gitsign, grype, snyk-cli, zot, pulumi, gitea, pulumi-language-java, trivy, gptscript...
GO-2026-5882 vulnerabilities
Vulnerabilities for packages: rancher-helm, k8ssandra-client, zarf, k9s, kots, opentofu, gogatekeeper, helm-mapkubeapis, kyverno, argo-cd, kyverno-notation-aws, rancher-fleet, vcluster, chartmuseum, teleport, oras, conftest, ratify, rancher, headlamp, rancher-agent, tigera-operator, trivy-operato...
GO-2023-1765 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, aactl...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, policy-controller, rancher-helm, azure-workload-identity-webhook, crossplane-provider-aws-cloudfront, gitlab-pages, polaris, neuvector-scanner, opentofu, terraform-provider-acme, cloud-provider-azure, dbmate, ksops, kaniko, speedtest-go,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: policy-controller, crossplane-provider-aws-cloudfront, gitlab-pages, apko, opentofu, terraform-provider-acme, melange, ksops, crossplane-provider-keycloak, crossplane-provider-azure-storage, crossplane-provider-family-aws, pulumi-language-dotnet, gitlab-kas,...
Finding Vulnerabilities Via LLM-Augmented Semantics-Aware Type-Checking
Vulnerability detection via static analysis traditionally relies on security experts encoding insecure coding patterns into algorithmic rules. However, this approach often focuses on syntactic patterns and overlooks deeper semantic information in the code, such as the meanings of variable and...
MINI-6WP6-V2RR-JQHM
Bulletin has no description...
CVE-2026-67201
A flaw was found in V, specifically within its net.urllib and net.http components. This vulnerability allows a remote attacker to bypass host-based allowlists by exploiting a difference in how URLs are parsed. By crafting a malicious URL with a backslash, an attacker can trick the system into...
brutus v1.11.0
Brutus "Et tu, Brute?" — The last words before credentials fall. Modern credential testing tool in pure Go Installation • Quick Start • Pipeline • Protocols • Enumeration • Proxy • Library Overview Brutus is a multi-protocol authentication testing tool designed to address a critical gap in...
inspect_petri v3.1.0
Inspect Petri Welcome to Inspect Petri, an auditing agent that enables automated monitoring and interaction with language models to detect potential alignment issues, reward hacking, and other concerning behaviors. Petri helps you rapidly test concrete alignment hypotheses end‑to‑end. It: Generat...
[SECURITY] [DLA 4736-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4736-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 12, 2026 https://wiki.debian.org/LTS -...
CVE-2026-18235
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...
CVE-2026-18235
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...
CVE-2026-18235
IBM i is affected by CVE-2026-18235 in Navigator for i. Description: remote authenticated attacker could execute arbitrary Control Language commands due to insufficient input validation. Affected products/versions: IBM i 7.3, 7.4, 7.5, 7.6. CVSS v3.1 base score 8.3 (HIGH) with network attack vect...
CVE-2026-18235 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation...
