CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...

generator-burp-extension

Generador de Extensiones Burp !NPM versionnpm-imagenpm-url Instalación Primero, instala Yeoman y generator-burp-extension usando npm asumimos que ya tienes preinstalado node.js. npm install -g yo npm install -g generator-burp-extension Luego genera tu nuevo proyecto: yo burp-extension...

CLEANSTART-2026-QA16480 Security fix for CVE-2025-61719 applied in: sigstore-scaffolding-fips 0.7.31-r0

Security vulnerability affects the sigstore-scaffolding-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TG34900 Security fix for CVE-2025-66506 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, sigstore-scaffolding 0.7.31-r2

CVE-2025-66506 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101433

Security vulnerability affects the sigstore-scaffolding-fips package. This issue is resolved in later releases. See references for vulnerability details...

Oracle Linux 9 : ELSA-2026-64812-0: / expat (ELSA-2026-648120)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648120 advisory. - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Fix CVE-2026-50219 Tenable has extracted the preceding description block...

expat security update

2.5.0-2.2 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221012 2.5.0-2.1 - Fix CVE-2026-50219 - Resolves: RHEL-220979...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: k8sgpt, dbmate, vcluster, terraform-provider-google, hubble-ui, guac, k3d, melange, cilium-cli, kaniko, spegel, dagger, zot, step, grafana-agent-operator, restic, step-ca, opentelemetry-collector, sigstore-scaffolding, certificate-transparency, k8sgpt-operator, kargo...

GO-2026-4377 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, falcoctl, ko, zot, vexctl, sigstore-scaffolding, tekton-chains, kubescape, buildkitd, tflint, policy-controller, gitsign, witness, flux-source-controller, neuvector-sigstore-interface, cosign, trivy, tkn, zarf, teleport, docker,...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: skaffold, kubeflow, flux-image-reflector-controller, opa-envoy, step-issuer, terraform-provider-google, pulumi-language-java, step, portieris, step-ca, nfs-subdir-external-provisioner, sigstore-scaffolding, dgraph, cert-exporter, pulumi, pulumi-language-dotnet,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: rancher-machine, cert-manager-webhook-pdns, skaffold, kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, oauth2-proxy, otel-cli, nerdctl, terraform-provider-azuread, falcoctl, argo-rollouts, cluster-api-gcp-controller,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: rancher-machine, cert-manager-webhook-pdns, skaffold, kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, oauth2-proxy, otel-cli, nerdctl, terraform-provider-azuread, falcoctl, argo-rollouts, cluster-api-gcp-controller,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: rancher-machine, cert-manager-webhook-pdns, skaffold, kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, oauth2-proxy, otel-cli, nerdctl, terraform-provider-azuread, falcoctl, argo-rollouts, cluster-api-gcp-controller,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: rancher-machine, cert-manager-webhook-pdns, skaffold, kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, oauth2-proxy, otel-cli, nerdctl, terraform-provider-azuread, falcoctl, argo-rollouts, cluster-api-gcp-controller,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: rancher-machine, cert-manager-webhook-pdns, skaffold, kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, oauth2-proxy, otel-cli, nerdctl, terraform-provider-azuread, falcoctl, argo-rollouts, cluster-api-gcp-controller,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: goreleaser, k8sgpt, flux-image-reflector-controller, boring-registry, prometheus-operator, argo-events, falcoctl, guac, up, zot, step, grafana-agent-operator, cortex, restic, step-ca, opentelemetry-collector, sigstore-scaffolding, wal-g, harbor-registry, hugo,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, thanos-operator, docker-credential-acr-env, extism, nerdctl, sbom-convert, docker-credential-gcr, fixuid, vexctl, ghaudit, cert-exporter, q, yunikorn-k8shim, controller-gen, ipfs-cluster, go-md2man, local-path-provisioner, yace...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, thanos-operator, docker-credential-acr-env, cni-plugins, nerdctl, sbom-convert, docker-credential-gcr, nats-server, fixuid, azcopy, ghaudit, nri-nginx, yunikorn-k8shim, percona-server-mongodb-operator, controller-gen, go-md2man, grafana-mimir,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: eksctl, kube-fluentd-operator, docker-credential-acr-env, oauth2-proxy, git-lfs, crossplane-provider-azure-sql, weaviate, nerdctl, falcoctl, nsc, nats-server, step-ca, vexctl, dgraph, kube-state-metrics, bank-vaults, pulumi, tekton-chains, slsa-verifier,...

GO-2024-2631 vulnerabilities

Vulnerabilities for packages: goreleaser, skaffold, oauth2-proxy, kubernetes-dashboard, weaviate, nerdctl, falcoctl, guac, melange, ko, frp, zot, step, step-ca, vexctl, sigstore-scaffolding, dgraph, bank-vaults, kargo, tekton-chains, kubescape, gomplate, slsa-verifier, terragrunt, apko,...