GHSA-22W5-2FXG-VRWX OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers

Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...

MINI-XJW2-9F6Q-XV52

Bulletin has no description...

MINI-F857-C9JM-X8RP

Bulletin has no description...

MINI-3JQ3-2PVH-HPRR

Bulletin has no description...

MINI-88Q6-52FF-J422

Bulletin has no description...

SUSE CVE-2026-33818

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, cluster-autoscaler, node-feature-discovery-fips, calico-fips, cloud-provider-gcp-cloud-controller-manager-fips, node-feature-discovery, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, azurefile-csi, blob-csi, vcluster,...

GO-2025-4193 vulnerabilities

Vulnerabilities for packages: tkn, kyverno-policy-reporter-plugins-kyverno, portieris, cosign-fips, kyverno-policy-reporter-plugins-kyverno-fips, podman, kyverno-notation-aws, cosign, image-factory-fips, tekton-chains-fips, tkn-fips, witness, sigstore-scaffolding-fips, kots, kyverno,...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: k3s...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

CVE-2026-33818

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

Denial of Service (DoS)

Overview std/net/url is a Go standard library package std/net/url Affected versions of this package are vulnerable to Denial of Service DoS. Go Vulnerability Report:Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on...

FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow

A heap-based buffer overflow in FreeRDP's cryptorsacommon allows an unauthenticated remote attacker to trigger a denial of service or potential remote code execution. By sending a crafted ciphertext during RDP Standard Security key establishment, the attacker can force a data write before the siz...

CVE-2026-20708

Insertion of sensitive information into log file in the subsystem for the IntelR AMT and IntelR Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur v...

CVE-2026-20715

Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...

CVE-2026-20734

Improper initialization in some firmware for some IntelR Active Management Technology IntelR AMT, and some IntelR Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This resul...

CVE-2026-20715

CVE-2026-20715 involves improper input validation in some firmware for Intel AMT and Intel Standard Manageability. A network-adjacent, unauthenticated attacker with low complexity and no user interaction could cause a denial of service via network access. The impact is limited to availability (hi...

EUVD-2026-56475

Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...

EUVD-2026-56473

Insertion of sensitive information into log file in the subsystem for the IntelR AMT and IntelR Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur v...

CVE-2026-20708

Insertion of sensitive information into log file in the subsystem for the IntelR AMT and IntelR Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur v...