freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

CVE-2026-72837

Summary: CVE-2026-72837 affects File Browser prior to 2.63.20, where createUserDir isolation in proxy and hook authentication auto-provisioning paths is not honored. This allows attackers with valid upstream-auth credentials to read, modify, delete, and share files belonging to other users due to...

CVE-2026-72837

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...

EUVD-2026-58651

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...

CVE-2026-72837 File Browser before 2.63.20 Privilege Escalation via Proxy Authentication

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...

CVE-2026-72837 File Browser before 2.63.20 Privilege Escalation via Proxy Authentication

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...

CVE-2026-72837 File Browser before 2.63.20 Privilege Escalation via Proxy Authentication

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...

EUVD-2026-58631

go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: kubernetes, buildkitd, kubernetes-fips, up, rancher-webhook, metrics-server-fips, prometheus-adapter, rancher-webhook-fips, caddy, kube-oidc-proxy, k3s, kubevela...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, etcd, kubernetes-csi-livenessprobe-fips, cri-tools, prometheus-postgres-exporter-fips, hugo-extended, litefs, envoy-ratelimit-fips, atlantis, nri-prometheus, buildkitd, kubernetes-dashboard-fips, logstash-exporter, secrets-store-csi-driver-provider-aws,...

GO-2026-4985 vulnerabilities

Vulnerabilities for packages: hydra-fips, gitlab-kas, opa-fips, amazon-cloudwatch-agent, milvus, k6-operator, terraform-mcp-server, tempo-fips, commercial-grafana, grafana-mimir, kubescape, gitlab-workhorse-ce-fips, jaeger-fips, splunk-otel-collector, vault-fips, gitlab-kas-fips,...

GO-2026-4289 vulnerabilities

Vulnerabilities for packages: cloudflared...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: grpc-health-probe, conftest, kaniko, osv-scanner, spegel, rqlite, hubble-ui, trivy, k3d, terragrunt, opa, terraform-docs, kubernetes-csi-external-provisioner, spire-server, minio, temporal, certificate-transparency, smarter-device-manager, zot, dbmate, fulcio,...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: authservice, splunk-otel-collector, gitea, atlantis, fluent-bit-plugin-loki, falcosidekick, kots, oauth2-proxy...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: zed, atuin, zola, linkerd-extension-init, sccache, xh, parseable, deno, wash, ntpd-rs, tealdeer, sdp-k8s-injector, shadowsocks-rust, wasm-pack, samply, wasmtime, zizmor, rustup, buck2, kdash, wasmcloud, wadm, sqlx, rye, cargo-audit, nushell, uv, qdrant, linkerd2-prox...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: istio, keda, grafana-pyroscope, loki, cloud-sql-proxy, minio, certificate-transparency, tempo, minio-object-browser, telegraf, prometheus-pushgateway, splunk-otel-collector, karma, minio-operator, mcp-grafana, mc, trillian, jaeger, aws-otel-collector, datadog-agent...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: prometheus, prometheus-operator, istio, keda, fluent-bit-plugin-loki, amazon-cloudwatch-agent-operator, metrics-server, loki, cloud-sql-proxy, minio, certificate-transparency, tempo, grafana, prometheus-pushgateway, splunk-otel-collector, karma, minio-operator,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: terragrunt, oauth2-proxy, spire-server, rekor, aactl, fulcio, kubescape, kots, tkn, vexctl, sops, slsa-verifier, dex, tekton-chains, gitsign, cloudflared, flux-kustomize-controller, flux-source-controller, cosign, argo-workflows...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, spegel, azure-service-operator, grafana-rollout-operator, kyverno-policy-reporter-ui, osv-scanner, hydra, terraform-provider-pagerduty, ytt, rancher-helm, esbuild, falco-no-driver, undock, redka, crossplane-provider-aws-cloudwatchlogs, terraform...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, azure-service-operator, grafana-rollout-operator, prometheus-operator, kyverno-notation-aws, gcsfuse, undock, terraform, opa, rancher-system-agent, grafana-alloy, bom, rabbitmq-default-user-credential-updater, delve, eksctl, aactl, flux,...