982880 matches found
GO-2022-0587 vulnerabilities
Vulnerabilities for packages: opa...
GO-2022-0574 vulnerabilities
Vulnerabilities for packages: opa...
GO-2026-4962 vulnerabilities
Vulnerabilities for packages: mattermost...
GO-2025-3565 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: sftpgo, gitea...
GO-2024-2476 vulnerabilities
Vulnerabilities for packages: dex...
GO-2026-5029 vulnerabilities
Vulnerabilities for packages: helm, step-issuer, glab, hubble, kots, karpenter, kyverno, falco-no-driver, fq, terraform-provider-acme, prometheus, minio, crossplane-provider-azure-storage, k3s, telegraf, crossplane-provider-aws-elasticache, kine, vale, flux, gitea, ingress-nginx-controller,...
GO-2024-2456 vulnerabilities
Vulnerabilities for packages: scorecard, gitness, src-fingerprint, bom, nuclei, gitsign, go-licenses, goreleaser, pulumi-kubernetes-operator...
GO-2026-5668 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, rancher, kots, skopeo, nuclei, datadog-agent, grafana, podman, osv-scanner, undock, ko, amazon-cloudwatch-agent-operator, envoy-gateway, trivy, buildah, spire-server, docker-credential-gcr, kpt, cri-tools, portieris, zot, opentelemetry-operator,...
GO-2026-5336 vulnerabilities
Vulnerabilities for packages: dagger, apko, kots, argo-events, tfsec, argo-workflows, nuclei, rancher-fleet, kyverno, terragrunt, pulumi-language-java, pulumi-kubernetes-operator, guac, witness, grype, steampipe, osv-scanner, scorecard, teleport, pulumi-language-dotnet, grafana-alloy, kubevela,...
OPENSUSE-SU-2026:21580-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
SUSE-SU-2026:23223-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
SUSE-SU-2026:23235-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
SUSE-SU-2026:23157-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and inject lines into records bsc1268353. -...
PT-2026-71978
chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs. Attackers can manipulate the Host header to redirect users to arbitrary hosts, enabling phishing attacks and credential theft...
CVE-2026-73421
NextAuth.js vulnerability CVE-2026-73421 affects next-auth v5: when server configuration has an error (e.g., missing issuer/authorization, unset AUTH_SECRET), the auth() wrapper can return a truthy error object in middleware, Route Handlers, React Server Components, etc. As a result, existence-ba...
CVE-2026-73421 NextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)
NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth object returned by the auth wrapper can fail open when Auth.js has a server configuration error. In middleware, Route...
CVE-2026-73421
NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth object returned by the auth wrapper can fail open when Auth.js has a server configuration error. In middleware, Route...
