GO-2026-5020 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, crossplane-provider-aws-iam, terraform-provider-tls, zarf, podman, fscrypt, wolfictl, containerd, crossplane-provider-family-azure, glab, falco-no-driver, crossplane-provider-aws-sqs, pulumi-language-dotnet,...

GO-2026-4869 vulnerabilities

Vulnerabilities for packages: dive, gitleaks, paranoia, kubernetes-csi-driver-nfs, podman, fscrypt, rabbitmq-messaging-topology-operator, rancher-agent, libnvidia-container, falco-no-driver, kyverno, cert-manager, sriov-network-device-plugin, pulumi-language-yaml, fuse-overlayfs-snapshotter,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: slsa-verifier, skopeo, gitsign, aactl, falco-no-driver, falcoctl, kubescape, cosign, tekton-chains, zarf, sigstore-scaffolding, witness, kots, vexctl...

GO-2026-4339 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, timescaledb-parallel-copy, kubernetes-csi-driver-nfs, mockgen, protoc-gen-go, kserve-modelmesh-serving, vault-secrets-webhook, crossplane-provider-aws-elasticache, gke-gcloud-auth-plugin, sriov-network-device-plugin, go-jsonnet, mag...

GO-2024-3005 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, helm-operator, opentelemetry-collector, tkn, helm-push, policy-controller, dive, skopeo, aactl, cri-tools, argo-workflows, scorecard, zarf, paranoia, grype, tekton-chains, zot, wolfictl, flux-image-reflector-controller, gitsign, vcluster, rancher-flee...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, tkn, policy-controller, wal-g, aactl, boring-registry, octo-sts, argo-workflows, crossplane-provider-azure-authorization, scorecard, zarf, temporal, tekton-chains, zot, argo-rollouts, docker, flyte, terraform, flux-image-reflector-controller, gitsign,...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

AZL-95789 CVE-2026-53801 affecting package rsync for versions less than 3.5.0-1

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

CVE-2026-53801

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

ALPINE-CVE-2026-53801

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

EUVD-2026-58039

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

CVE-2026-53801

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

CVE-2026-53801

CVE-2026-53801 affects rsync versions before 3.5.0. The issue is a symlink race in the sender’s directory scanning logic that can cause the sender to enumerate and transfer files outside the module root’s intended subtree. Attackers who can create or influence symlinks in a path component of the ...

CVE-2026-53801

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

CVE-2026-53801 rsync < 3.5.0 Symlink Race Condition Directory Traversal

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

CLEANSTART-2026-NA71469 Security fixes in syft 1.43.0-r1

Package syft version 1.43.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

PT-2026-71639

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A symlink race condition exists in the sender's directory scanning logic. This occurs when an attacker manipulates symlinks in a path component of the scanned tree, replacing a symlink with a directory...

CVE-2026-70467

A server-side request forgery ssrf vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all...

CVE-2026-68449

In the Linux kernel, the following vulnerability has been resolved: ata: satadwc460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug. When tagmask has only high bits set e.g. 0x80000000, the inner while...