GO-2026-5433 DevSpace UI Server WebSocket CheckOrigin does not validate source in github.com/loft-sh/devspace

DevSpace UI Server WebSocket CheckOrigin does not validate source in github.com/loft-sh/devspace. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

CVE-2025-71058

Achaldhir Dual DHCP DNS Server 8.01 contains a vulnerability where it improperly accepts and caches UDP DNS responses without validating that the source is a legitimate configured upstream DNS server. The software primarily matches responses by TXID and inserts the results into the cache. This al...