319555 matches found
GO-2025-3749 vulnerabilities
Vulnerabilities for packages: thanos-operator, kustomize, amass, newrelic-nri-statsd, linkerd2-proxy-init, dex, percona-server-mongodb-operator, render-template, hubble, mongodb-kubernetes-operator, cert-manager-cmctl, gatus, velero-plugin-for-csi, chartmuseum, yunikorn-k8shim, step, fixuid,...
GO-2026-5496 vulnerabilities
Vulnerabilities for packages: witness, kargo, argo-workflows, bom, skaffold, trufflehog, kubevela, kots, goreleaser, scorecard, cerbos, argocd-image-updater, nuclei, teleport, pulumi-language-yaml, terragrunt, src-fingerprint, wolfictl, tfsec, xeol, guac, pulumi-language-dotnet, argo-cd, k9s,...
MINI-MR2J-V2PG-JFMC
Bulletin has no description...
Trust without Boundaries: An Architectural Analysis of Satellite Flight Software
As spacecraft become more software-driven and interconnected, onboard flight software is an increasingly important security boundary. Popular flight software architectures often treat onboard components as trusted peers, simplifying integration while limiting internal isolation and access control...
CVE-2026-1621: Authentication Bypass by Primary Weakness
Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...
CVE-2026-56860
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
MINI-2QW5-VR2G-4Q26
Bulletin has no description...
CVE-2026-58437
Repository Visibility Manipulation via Git Push Options...
CVE-2026-59109 Zalktis: SQL injection via partner-controlled fields in imported e-invoices
SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice UBL/PEPPOL or an e-commerce export, Zalktis concatenates partner-controlled values directly into SQL statement text using string...
Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain
Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix...
CVE-2026-27544
Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...
MINI-JC6M-VX2C-6F23
Bulletin has no description...
MINI-9246-JG9R-956G
Bulletin has no description...
MINI-M336-GC9C-9R63
Bulletin has no description...
MINI-64WC-C7C3-9888
Bulletin has no description...
MINI-G4PP-H85F-P45W
Bulletin has no description...
CLEANSTART-2026-SK52724 Security fixes in cosign 3.1.2-r1
Package cosign version 3.1.2-r1 fixes 9 vulnerabilities: CVE-2026-54787, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-49835, ghsa-9c54-x2g4-v92j...
CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1
Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CLEANSTART-2026-CB76425 Security fixes in consul-k8s 2.0.1-r1
Package consul-k8s version 2.0.1-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-50151, CVE-2026-50162...
CLEANSTART-2026-GY63167 Security fixes in thingsboard 4.3.1.3-r1
Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...