reflector

reflector Descrizione L'estensione Burp Suite è in grado di trovare XSS riflesso sulla pagina in tempo reale durante la navigazione sul sito web e include alcune funzionalità come: Evidenziazione del riflesso nella scheda di risposta. Test di quali simboli sono consentiti in questo riflesso...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: grafana-fips, nova-fips, polaris, localstack, aws-ebs-csi-driver-fips, flux-operator, grafana-operator-fips, omnictl-multiarch, stakater-reloader, victorialogs-fips, aws-ebs-csi-driver, amazon-k8s-cni-fips, pluto, flux-source-watcher, victoriametrics-cluster-fips,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, thanos, velero, bank-vaults, flyte, flux-kustomize-controller, chezmoi, restic, k8sgpt, ksops, fluent-bit-plugin-loki, goreleaser, prometheus-operator, rclone, opentelemetry-collector-contrib, timestamp-authority, airflow, druid, hugo-extended,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, vale, terraform-provider-kubernetes, rabbitmq-messaging-topology-operator, temporal-server, kube-bench, sriov-network-device-plugin, crossplane-provider-aws-elasticache, spire-controller-manager, gitlab-pages, stakater-reloader,...

GO-2024-2598 vulnerabilities

Vulnerabilities for packages: q, yam, docker-cli, kubeflow-pipelines, nri-mysql, fuse-overlayfs-snapshotter, yq, scorecard, direnv, haproxy-ingress, nats, gitness, temporal-server, ytt, kube-bench, docker-credential-acr-env, docker-credential-gcr, grype, nodetaint, stakater-reloader, go-licenses,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: q, act, dapr, newrelic-nri-statsd, rancher-helm, kubeflow-pipelines, flux-kustomize-controller, snyk-cli, nri-consul, fuse-overlayfs-snapshotter, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, witness, osv-scanner, haproxy-ingress,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: bank-vaults, flux-kustomize-controller, kargo, snyk-cli, ksops, scorecard, gh, goreleaser, opentelemetry-collector-contrib, timestamp-authority, rekor, skopeo, rabbitmq-messaging-topology-operator, spire-server, terraform-provider-azurerm, flux-notification-controlle...

CVE-2026-73147

A flaw was found in svxlink's reflector client. The talkerstart and talkerstop event handlers directly concatenate a server-supplied talker callsign into TclEval commands without any sanitization or escaping. A malicious or compromised reflector server can supply a crafted callsign containing TCL...

CLEANSTART-2026-YP46917 Security fixes in flux-image-reflector-controller-fips 1.1.2-r0

Package flux-image-reflector-controller-fips version 1.1.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, CVE-2026-29181...

CVE-2026-40891 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

GHSA-G94R-2VXG-569J vulnerabilities

Vulnerabilities for packages: kubernetes-reflector, promitor...

CVE-2026-40894 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector, promitor...

GHSA-MR8R-92FQ-PJ8P vulnerabilities

Vulnerabilities for packages: kubernetes-reflector...

CVE-2026-40891 vulnerabilities

Vulnerabilities for packages: kubernetes-reflector, azure-functions-host...

CVE-2026-40894 vulnerabilities

Vulnerabilities for packages: promitor, kubernetes-reflector, azure-functions-host...

GHSA-G94R-2VXG-569J vulnerabilities

Vulnerabilities for packages: promitor, kubernetes-reflector, azure-functions-host...

GHSA-MR8R-92FQ-PJ8P vulnerabilities

Vulnerabilities for packages: kubernetes-reflector, azure-functions-host...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, grafana-rollout-operator, metacontroller, newrelic-k8s-metadata-injection, local-path-provisioner, gh, goreleaser, osv-scanner, malcontent, tailscale, fluxcd-kustomize-mutating-webhook, rabbitmq-messaging-topology-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, snyk-cli, kargo, vale, jitsucom-bulker, docker-machine-driver-linode, scorecard, terraform-provider-kubernetes, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, hubble, kube-bench, zot, sriov-network-device-plugin,...

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...