990762 matches found
GO-2022-0587 vulnerabilities
Vulnerabilities for packages: opa...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: sftpgo, gitea...
GO-2024-2476 vulnerabilities
Vulnerabilities for packages: dex...
GO-2026-5029 vulnerabilities
Vulnerabilities for packages: istio, zot, kine, kots, fq, nerdctl, step-issuer, traefik, gitea, kubernetes-dashboard, prometheus-operator, vale, gptscript, ingress-nginx-controller, kubernetes, falco-no-driver, crossplane-provider-aws-elasticache, helm, crossplane-provider-azure-storage, k3s,...
GO-2024-2456 vulnerabilities
Vulnerabilities for packages: go-licenses, src-fingerprint, nuclei, bom, goreleaser, pulumi-kubernetes-operator, gitness, scorecard, gitsign...
GO-2026-5668 vulnerabilities
Vulnerabilities for packages: zot, portieris, kots, nerdctl, nuclei, amazon-cloudwatch-agent, amazon-cloudwatch-agent-operator, opentelemetry-operator, osv-scanner, rancher, podman, trivy, rancher-agent, grafana-alloy, ko, kpt, spire-server, buildah, trivy-operator, undock, datadog-agent,...
GO-2026-5336 vulnerabilities
Vulnerabilities for packages: pulumi-language-yaml, zot, nfpm, kots, nuclei, rancher-fleet, tfsec, grype, gitlab-runner, gitea, guac, pulumi, crossplane, terragrunt, osv-scanner, scorecard, zarf, argo-workflows, k9s, melange, kargo, gptscript, argo-cd, wolfictl, trivy, syft, xeol, grafana-alloy,...
OPENSUSE-SU-2026:21580-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
SUSE-SU-2026:23235-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
SUSE-SU-2026:23157-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
SUSE-SU-2026:23223-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
Workspace Topology As an Attack Vector in Agentic Coding Assistants
Agentic coding assistants are finding widespread use, not just in new code development but in quickly ingesting and leveraging third-party code. This opens up a risk of malicious code being ingested as these coding tools operate with broad filesystem access inside developer workspaces. In this...
PT-2026-105551
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vrw8-fxc6-2r93. This link is maintained to preserve external references. Original Description chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that use...
Nuxt OG Image Spoofing
The vulnerability of the og/d/.png component of the Open Graph image generation module, which is part of the Nuxt OG Image framework for creating web applications and sites using Nuxt.js, relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability cou...
CVE-2026-73421
NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth object returned by the auth wrapper can fail open when Auth.js has a server configuration error. In middleware, Route...
CVE-2026-73421
NextAuth.js vulnerability CVE-2026-73421 affects next-auth v5: when server configuration has an error (e.g., missing issuer/authorization, unset AUTH_SECRET), the auth() wrapper can return a truthy error object in middleware, Route Handlers, React Server Components, etc. As a result, existence-ba...
CVE-2026-73421 NextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)
NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth object returned by the auth wrapper can fail open when Auth.js has a server configuration error. In middleware, Route...