GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-elasticsearch, runc, crossplane-provider-aws-elasticache, terraform-provider-acme, cluster-proportional-autoscaler, kyverno, cis-operator, continuity, kaniko, dask-gateway, kapp-controller, spark-operator, kube-vip, crossplane-provider-aws-memorydb, goreleaser,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cosign, runc, crossplane-provider-aws-elasticache, go-licenses, http-echo, kapp-controller, kubernetes-dns-node-cache, dask-gateway, rancher-loglevel, spark-operator, sftpgo-plugin-kms, gatekeeper, goreleaser, kubeflow, minio-operator, kserve-modelmesh-serving,...

CVE-2026-63362

A flaw was found in open62541. An unsigned integer underflow in the PubSub signature verification path may allow a remote attacker to cause a denial of service by sending a specially crafted User Datagram Protocol UDP packet. This vulnerability could make the affected system unavailable to...

CVE-2026-52878

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawData to decode to nil. Every transaction gossiped o...

CVE-2026-61387

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

EUVD-2026-52659

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

CVE-2026-61387

CVE-2026-61387 (Eclipse Milo) affects Milo 1.0.0–1.1.4. The issue is that monitored-item quota accounting is not exception-safe: if item creation fails due to an unchecked error, the server-global reservation is not restored. Additionally, deeply nested PubSub ExtensionObjects in a CreateMonitore...

CVE-2026-61387

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

EUVD-2026-51336

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

DEBIAN-CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

UBUNTU-CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362

The CVE-2026-63362 entry concerns an unsigned integer underflow in the open62541 PubSub signature verification path, which may let a remote attacker cause a denial of service via a crafted UDP packet. Affected component is the signature verification logic within PubSub of open62541. The root caus...

CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362 o6 Automation open62541 Integer Underflow

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362 o6 Automation open62541 Integer Underflow

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

PT-2026-66618

Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description An unsigned integer underflow occurs in the PubSub signature verification path. This flaw allows a remote attacker to trigger a denial of service by sending a specially crafted UDP packet...

EUVD-2026-46373

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64617

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...