21995 matches found
EUVD-2026-58714
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
CVE-2026-47766 affects crun prior to version 1.28. When an OCI bundle uses a symlink for rootfs/dev and the bundle omits mounting /dev, crun may follow the symlink and create default device nodes and stdio symlinks at the symlink target outside the container rootfs. In a local rootful crun replay...
CVE-2026-47766 crun follows rootfs /dev symlink while creating default devices
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
MAL-2026-14040 Malicious code in @workoscalifant/sudoku-term (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a676b7bd005c67960fae27b9371d1c321998f5d7f6f0d9fc5f2b7d27fb22ce package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath, which execFileSyncs prebuilt/linux-x64/sudoku-hint wi...
CVE-2026-57469
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...
EUVD-2026-58676
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...
CVE-2026-57469 Cross-Site Request Forgery (CSRF) in KUNBUS PiCtory
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing operations in the context of an authenticated operator,...
RLSA-2026:54541 Important: .NET 8.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
GO-2025-3690 vulnerabilities
Vulnerabilities for packages: seaweedfs-operator-fips, seaweedfs-operator...
GO-2024-3222 vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, rke2-runtime...
GO-2024-3042 vulnerabilities
Vulnerabilities for packages: podman...
GO-2023-2042 vulnerabilities
Vulnerabilities for packages: metrics-server...
GO-2026-4830 vulnerabilities
Vulnerabilities for packages: nats-top, nats, prometheus-nats-exporter-fips, k3s, milvus, kine, rke2-runtime, rke2-runtime-fips, telegraf, nats-top-fips, prometheus-nats-exporter, nats-fips...
GO-2024-3218 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, rke2-runtime...
GO-2026-4841 vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, k3s, milvus...
GO-2026-4826 vulnerabilities
Vulnerabilities for packages: nats-top, nats, prometheus-nats-exporter-fips, k3s, milvus, kine, rke2-runtime, rke2-runtime-fips, telegraf, nats-top-fips, prometheus-nats-exporter, nats-fips...
GO-2026-4827 vulnerabilities
Vulnerabilities for packages: nats-top, nats, prometheus-nats-exporter-fips, k3s, milvus, kine, rke2-runtime, rke2-runtime-fips, telegraf, nats-top-fips, prometheus-nats-exporter, nats-fips...