CVE-2026-82552

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

CVE-2026-82552 Linux Foundation Magma gNB Termination ngap_amf.c denial of service

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

EUVD-2026-68272

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: juicefs-csi-driver, jitsucom-bulker, guac, cloudflared, amazon-cloudwatch-agent, kubernetes, aws-node-termination-handler, kubevela, redis-operator, emissary, verticadb-operator, op-geth, infinispan-operator, rancher-telemetry, etcd...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, metallb, rke2-runtime-fips, crossplane-provider-aws-memorydb-fips, boring-registry, knative-operator-fips, cloudbeat, crossplane-provider-aws-kafkaconnect, gcp-compute-persistent-disk-csi-driver-fips, commercial-expanso-edge, distributio...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, metallb, rke2-runtime-fips, crossplane-provider-aws-memorydb-fips, boring-registry, knative-operator-fips, cloudbeat, crossplane-provider-aws-kafkaconnect, gcp-compute-persistent-disk-csi-driver-fips, commercial-expanso-edge, distributio...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: trufflehog, velero-plugin-for-microsoft-azure, xeol, fluent-operator, argo-rollouts, prometheus, restic, crossplane-provider-aws-route53, kubewatch, fulcio, migrate, cloud-provider-azure, loki, helm-push, apache-exporter, kubernetes-csi-external-attacher,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, mongodb-kubernetes-operator-fips, knative-operator-fips, mlrun-log-collector-fips, step-ca, chainctl-fips, nginx-kubernetes-ingress-fips, monstache, ocm-cli-fips, crossplane-provider-aws-elasticsearch-fips, docker-credential-acr-env-fips...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: sonobuoy, hubble, k8sgpt-operator, cluster-api, dynamic-localpv-provisioner, linkerd2, headlamp, postgres-operator, argo-rollouts, vcluster, verticadb-operator, argo-workflows, infinispan-operator, kubescape, envoy-gateway, gitlab-kas, cilium-cli, rancher,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: eck-operator, rke2-runtime-fips, k3s, cert-manager-istio-csr, cloudbeat, rancher-support-bundle-kit, falcoctl, kubevela, gitlab-kas, plugin-barman-cloud, percona-xtradb-cluster-operator, consul-k8s-fips, redis-operator-fips, kubernetes-dashboard-api,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: xeol, kafkaexporter, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, prometheus, kubewatch, migrate, cloud-provider-azure, helm-push, nsc, apache-exporter, dfc, kubernetes-csi-external-attacher, step-kms-plugin, litestream, mockery, kubernetes-replicator,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, envconsul, xeol, cue, kubernetes-csi-external-health-monitor, kubernetes-csi-driver-nfs, ko, sftpgo-plugin-auth, argo-rollouts, envoy-ratelimit, prometheus, secrets-store-csi-driver, kubernetes-csi-driver-hostpath, syft, argo-workflows, witness, runc,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: trufflehog, k8sgateway, guac, xeol, amazon-cloudwatch-agent, grype, kapp, kubernetes-csi-external-health-monitor, podinfo, ko, fluent-operator, argo-rollouts, envoy-ratelimit, prometheus, secrets-store-csi-driver, kubernetes-csi-driver-hostpath, restic, argo-workflow...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: op-geth, prometheus-alertmanager-fips, metallb, pulumi-language-java, rke2-runtime-fips, crossplane-provider-aws-memorydb-fips, nginx-kubernetes-ingress, boring-registry, knative-operator-fips, cloudbeat, crossplane-provider-aws-kafkaconnect,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: op-geth, prometheus-alertmanager-fips, metallb, pulumi-language-java, rke2-runtime-fips, crossplane-provider-aws-memorydb-fips, nginx-kubernetes-ingress, boring-registry, knative-operator-fips, cloudbeat, crossplane-provider-aws-kafkaconnect,...

CVE-2026-28799 PJSIP: Heap use-after-free in PJSIP presence subscription termination handler

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, xeol, kafkaexporter, iptables-wrappers, kubernetes-csi-driver-nfs, argo-rollouts, envoy-ratelimit, restic, fulcio, helm-push, tempo, nsc, kubernetes-csi-external-attacher, dfc, step-kms-plugin, mockery, kubernetes-replicator,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...