CVE-2024-28854 vulnerabilities

Vulnerabilities for packages: sdp-k8s-injector...

GHSA-5VPF-XVV7-C8VH vulnerabilities

Vulnerabilities for packages: camunda-zeebe...

GHSA-X5X7-PVPW-W5HV vulnerabilities

Vulnerabilities for packages: zulu-psu...

CVE-2026-64654 affecting package gh for versions less than 2.97.0-1

CVE-2026-64654 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2026-19693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101131 advisory. Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird...

DEBIAN-CVE-2026-72483

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function handles USB hub class requests to the virtual root hub. In the default branches of both the ClearPortFeature and SetPortFeature switc...

GO-2024-2697 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-4446 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GO-2026-5421 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, falco-no-driver, prometheus-podman-exporter-fips...

GO-2026-6003 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-6006 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2024-2718 vulnerabilities

Vulnerabilities for packages: melange, ko, chainctl, goreleaser, kubescape, policy-controller-fips, tekton-chains-fips, gitsign, aactl, vexctl, spire-server-fips, falcoctl-fips, wolfictl, spire-server, flux-source-controller, slsa-verifier, tkn, policy-controller, tekton-chains, ko-fips, zarf, zo...

GO-2026-5684 vulnerabilities

Vulnerabilities for packages: spegel, ipfs-cluster, k3s...

GO-2025-3381 vulnerabilities

Vulnerabilities for packages: flux, kyverno-notation-aws, flux-source-controller...

GO-2024-2618 vulnerabilities

Vulnerabilities for packages: falcosidekick, guac...

GO-2025-4240 vulnerabilities

Vulnerabilities for packages: vcluster, kubernetes, yunikorn-k8shim, rancher-agent, rancher-system-agent, blob-csi, kubernetes-dns-node-cache, calico, kubernetes-csi-driver-nfs, local-static-provisioner, nodetaint, aws-efs-csi-driver, mesosphere-vsphere-csi, rancher, kubernetes-csi-driver-hostpat...

Linux Distros Unpatched Vulnerability : CVE-2026-48791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 erroneously removed verification of the integrated Rekor ent...

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68212 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68212 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...