234236 matches found
CVE-2026-39817 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, gitlab-cng, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni,...
GHSA-497X-JCXF-M478 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, kube-rbac-proxy-fips, runc, google-osconfig-agent, net-kourier-fips,...
CVE-2026-39819 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, gitlab-cng, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni,...
CVE-2026-42501 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, gitlab-cng, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni,...
GHSA-QF3Q-3H68-MMH2 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, gitlab-cng, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni,...
CVE-2026-33811 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, kube-rbac-proxy-fips, runc, google-osconfig-agent, net-kourier-fips,...
GHSA-5M4P-2GJX-P2G8 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, gitlab-cng, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni,...
GHSA-8G2R-HHVJ-MV99 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni, google-osconfig-agent,...
GHSA-QC64-M6C2-V4X7 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, gitlab-cng, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni,...
CVE-2026-39836 vulnerabilities
Vulnerabilities for packages: argo-cd, buildah-fips, guac, crossplane-provider-aws-dynamodb-fips, crossplane-provider-aws-osis, prometheus-mongodb-exporter, flux, metrics-server-fips, kube-conformance, hclmerge-fips, hugo-fips, kube-rbac-proxy-fips, runc, amazon-k8s-cni, google-osconfig-agent,...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: argo-cd, flux, kube-conformance, omnictl-multiarch, newrelic-nri-kube-events, go-msft, omnictl-multiarch-fips, helm-operator, kubevirt-cdi-apiserver-fips, chainctl-fips, cloudflared-fips, consul-fips, mlrun-log-collector, grafana-alloy-fips,...
Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017342)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017342 advisory. A half-blind Server Side Request Forgery SSRF vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: NetworkManager (UTSA-2026-016802)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016802 advisory. A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configu...
CVE-2026-42453
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, the extractArchive and compressFiles endpoints in file-manager.ts use double-quoted strings for shell command construction, unlike all other file manager operation...
EUVD-2026-28872
Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In versions 2.14.0 and prior, the archive upload endpoint POST /api/v1/archives/linkId?format=4 accepts HTML files text/html without sanitizing JavaScript content. When the archive i...
CLSA-2026-1778266904 kernel: Fix of 188 CVEs
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - clk: Fix clkhwgetclk when dev is NULL CVE-2022-49187 - x86/sgx: Add overflow check in sgxvalidateoffsetlength CVE-2022-49785 - ext4: init quota for 'old.inode' in...
CVE-2026-42453 Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, the extractArchive and compressFiles endpoints in file-manager.ts use double-quoted strings for shell command construction, unlike all other file manager operation...
CVE-2026-42453
Termix is affected by a command injection in the file-manager.ts endpoints extractArchive and compressFiles due to the use of double-quoted strings for shell construction, enabling $(command) substitution on the remote SSH host. This vulnerability (CVE-2026-42453) can lead to arbitrary command ex...
MAL-2026-3421 Malicious code in oneblk-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46bbc3e155a30851463f65a3f9d5af33ebd5172df5ad70f7b022a77448fc6eb The package oneblk-design-system was found to contain malicious code. Source: ossf-package-analysis...