464 matches found
GO-2020-0036 vulnerabilities
Vulnerabilities for packages: k3d, dex-k8s-authenticator...
GO-2026-4412 vulnerabilities
Vulnerabilities for packages: cg, wolfictl...
GO-2026-4441 vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, gitness, k8s-device-plugin, aws-load-balancer-controller, gitlab-rails-ce, etcd, cilium-envoy, nvidia-gpu-operator-validator, localstack, runc, rke2-runtime-fips, cilium-envoy-fips, terraform, gendesk, rke2-runtime, backup-restore-operator...
GO-2025-4135 vulnerabilities
Vulnerabilities for packages: node-problem-detector-fips, crossplane-provider-azure-managedidentity, kube-metrics-adapter-fips, sops, cert-manager-webhook-pdns, modelmesh-runtime-adapter, sftpgo-plugin-kms, crossplane-provider-aws-eks, nemo, amazon-cloudwatch-agent-fips,...
GO-2025-4160 vulnerabilities
Vulnerabilities for packages: zarf, k9s...
CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64554 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64364 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64364 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-44839 affecting package rabbitmq-server for versions less than 3.13.7-8
CVE-2026-44839 affecting package rabbitmq-server for versions less than 3.13.7-8. A patched version of the package is available...
CVE-2026-50524 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
Malicious code in twcvhjlksdmx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b37bf3e91951e089b31d7aa6d31834fef110ba5bfc1c8c3cb09e701c9c1878 The tarball contains only package.json and index.html. package.json declares no preinstall/install/postinstall/prepare lifecycle hooks and sets main ...
GHSA-77QW-3XM6-R2PP vulnerabilities
Vulnerabilities for packages: python...
DEBIAN-CVE-2026-68250
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af...
DEBIAN-CVE-2026-68108
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...
[SECURITY] Fedora 43 Update: rpm-6.0.2-1.fc43
The RPM Package Manager RPM is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating software packages. Each software package consists of an archive of files along with information about the package like its version, a...
Vulnerabilities are handled in GitLab Community Edition and Enterprise Edition
GitLab Inc. has identified several vulnerabilities in GitLab Enterprise Edition EE and other versions of GitLab, particularly in releases from version 8.3 to 19.1.1, with a focus on versions around 18.11.6, 19.0.3, and 19.1.1. These vulnerabilities affect various components of GitLab, including t...
GHSA-WFQX-GJRF-G28R Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag
Summary Crossplane allows package signature verification to be configured via the ImageConfig mechanism. When enabled, the package manager uses cosign to verify that packages are correctly signed before pulling and installing them. When a package is installed using a tag reference e.g., a semanti...
DEBIAN-CVE-2026-44942
A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content...
CVE-2026-41985
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
