EUVD-2026-46433

Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. A specially crafted search request containing a null value in a specific query clause causes an internal assertion to be raised during query parsing. Because Elasticsearch treats...

CVE-2026-63140

CVE-2026-63140 describes a Reachable Assertion (CWE-617) in Elasticsearch that can cause denial of service. A specially crafted search containing a null value in a specific query clause triggers an internal assertion during query parsing, which Elasticsearch treats as a fatal error and terminates...

CVE-2026-59892

OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. Prior to 2.9.0, @opentelemetry/propagator-jaeger decodes incoming uber-trace-id and uberctx- HTTP header values with decodeURIComponent without handling decode errors, allowing an unauthenticated remote attacker to send a malformed...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: grafana-mimir, flux-kustomize-controller, kyverno-notation-aws-fips, knative-kafka-broker, crossplane-provider-aws-directconnect, consul-fips, cerbos, peerdb-flow, gatus, seaweedfs-rocksdb-fips, envoy-ratelimit-fips, amazon-cloudwatch-agent-operator-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: grafana-mimir, flux-kustomize-controller, kyverno-notation-aws-fips, knative-kafka-broker, crossplane-provider-aws-directconnect, consul-fips, cerbos, peerdb-flow, gatus, seaweedfs-rocksdb-fips, envoy-ratelimit-fips, amazon-cloudwatch-agent-operator-fips,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, addon-resizer, loki, delve, cluster-api-gcp-controller, crossplane-provider-aws-cloudwatchlogs, helm-set-status, vitess, dagdotdev, cis-operator, witness, kubernetes-dashboard, gatus, cert-manager-cmctl, argo-workflows, sealed-secrets,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: helm-push, crossplane-provider-aws-directconnect, kube-vip, nrdot-collector-k8s-fips, consul-fips, seaweedfs-rocksdb-fips, amazon-cloudwatch-agent-operator-fips, teleport, crossplane-provider-aws-ssm, timoni, pvc-autoresizer-fips, emissary,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: verticadb-operator, cloudnative-pg, kubeflow-pipelines, emissary, infinispan-operator, kots, velero, kubernetes, argo-rollouts, kubernetes-dashboard-api, kubescape, argocd-image-updater, kubevela, cri-tools, istio, rancher-agent, vcluster, jitsucom-bulker,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: verticadb-operator, cloudnative-pg, kubeflow-pipelines, emissary, infinispan-operator, kots, velero, kubernetes, argo-rollouts, kubernetes-dashboard-api, kubescape, argocd-image-updater, kubevela, cri-tools, istio, rancher-agent, vcluster, jitsucom-bulker,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: addon-resizer, go-licenses, nats-server, golangci-lint, gitsign, spire-server, ipfs-cluster, oras, delve, helm-set-status, opentelemetry-operator, cis-operator, amass, witness, kubernetes-dashboard, s5cmd, eksctl, gatus, cert-manager-cmctl, argo-workflows,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: azure-service-operator, crossplane-provider-aws-rds, addon-resizer, azcopy, guac, restic, dex, kube-metrics-adapter, velero, weaviate, blob-csi, flyte, loki, sftpgo-plugin-kms, task, keda, spire-server, db-operator, snyk-cli, conftest, cert-manager,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: azure-service-operator, crossplane-provider-aws-rds, addon-resizer, azcopy, guac, restic, dex, kube-metrics-adapter, velero, weaviate, blob-csi, flyte, loki, sftpgo-plugin-kms, task, keda, spire-server, db-operator, snyk-cli, conftest, cert-manager,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager, grafana-mimir, flux-kustomize-controller, kyverno-notation-aws-fips, knative-kafka-broker, crossplane-provider-aws-directconnect, cluster-api-ipam-provider-in-cluster, nrdot-collector-k8s-fips, consul-fips, cerbos, peerdb-flow,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: opentofu, portieris, pgpool2exporter, guac, go-licenses, restic, src-fingerprint, kube-metrics-adapter, velero, newrelic-nri-statsd, ini-file, rancher-loglevel, task, bazelisk, minio-object-browser, manifest-tool, mods, extism, container-object-storage-interface,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: opentofu, portieris, gobump, pgpool2exporter, guac, go-licenses, restic, src-fingerprint, kube-metrics-adapter, velero, newrelic-nri-statsd, ini-file, rancher-loglevel, task, bazelisk, minio-object-browser, manifest-tool, mods, extism,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: opentofu, portieris, gobump, pgpool2exporter, guac, go-licenses, restic, src-fingerprint, kube-metrics-adapter, velero, newrelic-nri-statsd, ini-file, rancher-loglevel, task, bazelisk, minio-object-browser, manifest-tool, mods, extism,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: opentofu, portieris, gobump, pgpool2exporter, guac, go-licenses, restic, src-fingerprint, kube-metrics-adapter, velero, newrelic-nri-statsd, ini-file, rancher-loglevel, task, bazelisk, minio-object-browser, manifest-tool, mods, extism,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: opentofu, portieris, gobump, pgpool2exporter, guac, go-licenses, restic, src-fingerprint, kube-metrics-adapter, velero, newrelic-nri-statsd, ini-file, rancher-loglevel, task, bazelisk, minio-object-browser, manifest-tool, mods, extism,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: opentofu, portieris, gobump, pgpool2exporter, guac, go-licenses, restic, src-fingerprint, kube-metrics-adapter, velero, newrelic-nri-statsd, ini-file, rancher-loglevel, task, bazelisk, minio-object-browser, manifest-tool, mods, extism,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: opentofu, portieris, gobump, pgpool2exporter, guac, go-licenses, restic, src-fingerprint, kube-metrics-adapter, velero, newrelic-nri-statsd, ini-file, rancher-loglevel, task, bazelisk, minio-object-browser, manifest-tool, mods, extism,...