GO-2025-3841 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2025-3416 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble...

GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2025-3605 vulnerabilities

Vulnerabilities for packages: kots, filebrowser...

GO-2025-3749 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, clickhouse-operator, kwok, cass-operator, newrelic-k8s-metadata-injection, sftpgo-plugin-geoipfilter, cluster-proportional-autoscaler, hivemind, docker-machine-driver-harvester, aws-application-networking-k8s, fscrypt,...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: gitaly, kots, zarf, act, gitsign, src-fingerprint, grype, argo-events, kyverno, argocd-image-updater, gomplate, teleport, terragrunt, tfsec, trivy-operator, nuclei, dagger, flux, kaniko, flux-image-automation-controller, kubescape, pulumi-kubernetes-operator,...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

MINI-MR2J-V2PG-JFMC

Bulletin has no description...

MINI-2QW5-VR2G-4Q26

Bulletin has no description...

Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

Personal repositories are where corporate secrets quietly escape. Wiz correlates them to your developers, validates the real risk, and drives the fix...

CVE-2026-27544

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

MINI-64WC-C7C3-9888

Bulletin has no description...

MINI-G4PP-H85F-P45W

Bulletin has no description...

CLEANSTART-2026-GY63167 Security fixes in thingsboard 4.3.1.3-r1

Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1

Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-SE70344 Security fixes in thingsboard 4.2.2.3-r1

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-CB76425 Security fixes in consul-k8s 2.0.1-r1

Package consul-k8s version 2.0.1-r1 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-50151, CVE-2026-50162...

ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root

Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by sequenceX0 in WordPress Plugin SAML SP Single Sign On versions = 5.4.3...

XWiki Platform - Remote Code Execution

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document SkinsCode.XWikiSkinsSheet leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute...