CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, teleport-operator-fips, mapotf-fips, http-echo, kubedock, kyverno-policy-reporter-kyverno-plugin-fips, crossplane-provider-aws-route53recoverycontrolconfig, gomplate-fips, k6-operator, kubescape, crossplane-provider-aws-gamelift,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, snyk-cli,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, snyk-cli,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, kwok, pluto, terraform-provider-azapi, newrelic-infrastructure-agent, envconsul, ko, crossplane-provider-azure-storage, azure-service-operator, x509-certificate-exporter, goreleaser, crossplane-provider-keycloak, consul-k8s, tetrago...

CVE-2026-107804 Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the backend has no trusted proxy configuration. Management requests can be attributed to loopback and pass the IP allowli...

CVE-2026-107804 Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the backend has no trusted proxy configuration. Management requests can be attributed to loopback and pass the IP allowli...

CVE-2026-107804

The Nginx UI web user interface for the Nginx web server is vulnerable in versions 2.2.0 through 2.6.0 due to a missing trusted proxy configuration in its bundled reverse proxy. This flaw causes the backend to fail to preserve external client identities, attributing management requests to the loo...

CVE-2026-107804 Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the backend has no trusted proxy configuration. Management requests can be attributed to loopback and pass the IP allowli...

EUVD-2026-95817

Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the backend has no trusted proxy configuration. Management requests can be attributed to loopback and pass the IP allowli...

CVE-2026-107804

Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the backend has no trusted proxy configuration. Management requests can be attributed to loopback and pass the IP allowli...

MAL-2026-17710 Malicious code in pxnpm (npm)

pxnpm 7.0.0-beta.6, 7.0.0-beta.8 and 7.0.0 published 2026-10-06 by user nfjbill are a 10-file, 16 KB launcher for a native executable that is not contained in the package. The postinstall script bin/install.cjs calls ensureNative in dist/download.cjs, which downloads a 17-21 MB Brotli archive for...

Malicious code in pxnpm (npm)

pxnpm 7.0.0-beta.6, 7.0.0-beta.8 and 7.0.0 published 2026-10-06 by user nfjbill are a 10-file, 16 KB launcher for a native executable that is not contained in the package. The postinstall script bin/install.cjs calls ensureNative in dist/download.cjs, which downloads a 17-21 MB Brotli archive for...

aardwolf

🚩 Sponsor Se ti piace questo progetto, valuta l'acquisto di licenze di OctoPwn, la nostra suite completa di pentesting che gira nel tuo browser! Per notifiche su nuove build/versioni e altre informazioni, unisciti al nostro Discord AARDWOLF - Client RDP/VNC asincrono in Python headless Questo...