514 matches found
GHSA-9F3F-WV7R-QC8R vulnerabilities
Vulnerabilities for packages: spegel, ipfs-cluster, op-geth, kubo, k3s...
AZL-78216 CVE-2026-26958 affecting package telegraf 1.31.0-15
filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If Point.MultiScalarMult i...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: db-operator, ksops, openbao, croc, timestamp-authority, crossplane-provider-sql, rekor, spicedb, mattermost, sops, aactl, tkn, dex, step-ca, temporal, envoy-gateway, splunk-otel-collector, chezmoi, age, fulcio, sqlexporter, trillian, certificate-transparency, apko,...
AZL-77645 CVE-2026-26014 affecting package telegraf for versions less than 1.29.4-21
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...
AZL-77649 CVE-2026-26014 affecting package telegraf for versions less than 1.31.0-15
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Pion DTLS versions v1.0.0 through v3.0.10 and 3.1.0 use random nonce generation with AES GCM ciphers, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonc...
AZL-77547 CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21
The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...
AZL-77559 CVE-2026-2303 affecting package telegraf for versions less than 1.31.0-15
The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...
AZL-77055 CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-77102 CVE-2025-58190 affecting package telegraf for versions less than 1.31.0-15
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-77099 CVE-2025-47911 affecting package telegraf for versions less than 1.31.0-15
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-77052 CVE-2025-47911 affecting package telegraf for versions less than 1.29.4-21
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-75557 CVE-2025-11065 affecting package telegraf for versions less than 1.31.0-15
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
AZL-75576 CVE-2025-11065 affecting package telegraf for versions less than 1.29.4-21
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in...
Ubuntu: Security Advisory (USN-7966-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-10543 affecting package telegraf for versions less than 1.31.0-12
CVE-2025-10543 affecting package telegraf for versions less than 1.31.0-12. A patched version of the package is available...
CVE-2025-10543 affecting package telegraf for versions less than 1.29.4-18
CVE-2025-10543 affecting package telegraf for versions less than 1.29.4-18. A patched version of the package is available...
AZL-71320 CVE-2025-10543 affecting package telegraf for versions less than 1.29.4-18
In Eclipse Paho Go MQTT v3.1 library paho.mqtt.golang versions =1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server for example, part of an MQTT topic may leak into...
CVE-2025-47913 affecting package telegraf for versions less than 1.31.0-11
CVE-2025-47913 affecting package telegraf for versions less than 1.31.0-11. A patched version of the package is available...
AZL-70343 CVE-2025-47913 affecting package telegraf for versions less than 1.31.0-11
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
