GO-2024-2718 vulnerabilities

Vulnerabilities for packages: wolfictl, policy-controller, tekton-chains, chainctl, policy-controller-fips, aactl, slsa-verifier, melange, gitsign, tkn-fips, falcoctl, zarf, spire-server, neuvector-sigstore-interface, vexctl, goreleaser, flux-source-controller, tkn, skaffold, tekton-chains-fips,...

GO-2025-3841 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2025-3416 vulnerabilities

Vulnerabilities for packages: hubble, hubble-ui...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3605 vulnerabilities

Vulnerabilities for packages: kots, filebrowser...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: yunikorn-web, mc, yunikorn-k8shim, docker-credential-ecr-login, trust-manager, splunk-otel-collector, linkerd2-proxy-init, logstash-exporter, go, prometheus-operator, newrelic-fluent-bit-output, sftpgo, podinfo, wazero, opencost, dgraph, envconsul, promxy,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, grype, rancher-fleet, xeol, nuclei, trivy-operator, argo-cd, bom, melange, kubescape, gitaly, cerbos, gitsign, flux-image-automation-controller, pulumi-language-yaml, argo-workflows, tfsec, gitea, src-fingerprint, witness,...

MINI-MR2J-V2PG-JFMC

Bulletin has no description...

CVE-2026-1621: Authentication Bypass by Primary Weakness

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

Trust without Boundaries: An Architectural Analysis of Satellite Flight Software

As spacecraft become more software-driven and interconnected, onboard flight software is an increasingly important security boundary. Popular flight software architectures often treat onboard components as trusted peers, simplifying integration while limiting internal isolation and access control...

MINI-2QW5-VR2G-4Q26

Bulletin has no description...

CVE-2026-59109 Zalktis: SQL injection via partner-controlled fields in imported e-invoices

SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice UBL/PEPPOL or an e-commerce export, Zalktis concatenates partner-controlled values directly into SQL statement text using string...

Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix...

CVE-2026-27544

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

MINI-JC6M-VX2C-6F23

Bulletin has no description...

MINI-9246-JG9R-956G

Bulletin has no description...

MINI-M336-GC9C-9R63

Bulletin has no description...

MINI-64WC-C7C3-9888

Bulletin has no description...

MINI-G4PP-H85F-P45W

Bulletin has no description...

CLEANSTART-2026-SE70344 Security fixes in thingsboard 4.2.2.3-r1

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...