GHSA-7QCH-W8M5-G3H3 vulnerabilities

Vulnerabilities for packages: victoriametrics-cluster, guac, trino, docker-credential-ecr-login, rancher-system-upgrade-controller, prometheus-operator, flux-notification-controller, verticadb-operator, kitty, runc, argo-rollouts, git-credential-oauth, otel-cli, influx, kapp, wave, containerd,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, k3d, spicedb, k8sgpt-operator, vcluster, falcosidekick, grpc-health-probe, smarter-device-manager, rqlite, ksops, spegel, guac, sigstore-scaffolding, tflint, terragrunt, cilium-cli, zarf, dagger, dex, k8sgpt, kubernetes-csi-external-provisioner,...

Security update for rqlite (important)

openSUSE security update: security update for rqlite ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20854-1 Rating: important References: bsc1265706 bsc1266544 Cross-References: CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2026-33814 SUSE : 7.5...

OPENSUSE-SU-2026:20854-1 Security update for rqlite

This update for rqlite fixes the following issues: Changes in rqlite: - Update to version 10.2.0: Support verifying mTLS peer Common Name Console supports restore from SQLite data Console "count rows" respects current Tables Expand/Collapse state Console supports dropping indexes Further Console...

OPENSUSE-SU-2026:10901-1 rqlite-10.1.0-2.1 on GA media

These are all security issues fixed in the rqlite-10.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

rqlite-10.1.0-1.1 on GA media (moderate)

rqlite-10.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10847-1 Rating: moderate Cross-References: CVE-2026-33814 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2026:10847-1 rqlite-10.1.0-1.1 on GA media

These are all security issues fixed in the rqlite-10.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: fq, kustomize, vault-k8s, nuclei, hello-world-golang, kpt, prometheus-adapter, oras, helm-push, newrelic-infrastructure-agent, nri-mysql, docker-cli, docker-credential-ecr-login, ytt, aws-efs-csi-driver, nri-nagios, controller-gen, k8sgpt, prometheus-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kpt, prometheus-adapter, metacontroller, newrelic-infrastructure-agent, sigstore-scaffolding, aws-efs-csi-driver, pulumi-language-yaml, kubeflow, stakater-reloader, flux-notification-controller, minio, pulumi-kubernetes-operator, nodetaint,...

SQL Injection

Description A SQL Injection in rqlite store Proof of Concept use example code go package main import "io" "log" "net/http" "github.com/alexedwards/scs/rqlitestore" "github.com/alexedwards/scs/v2" "github.com/rqlite/gorqlite" var sessionManager scs.SessionManager func main // Establish connection ...