GO-2026-5239 vulnerabilities

Vulnerabilities for packages: grafana...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: snyk-cli, grype, trivy, wolfictl, kots, kubescape, conftest, terraform, k9s, tfsec, terragrunt, zarf, zot, tflint...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: grype, temporal-server, nri-elasticsearch, newrelic-infrastructure-agent, flux, pulumi-language-yaml, kpt, ferretdb, kind, flux-helm-controller, litefs, memcached-exporter, k8sgpt-operator, cfssl, go-licenses, kine, kubernetes-dashboard, nri-redis, cert-exporter,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: argo-events, kubescape, trufflehog, policy-controller, go-licenses, crossplane-provider-aws-firehose, sops, crossplane-provider-aws-cloudwatchlogs, terraform-provider-pagerduty, crossplane-provider-family-azure, ksops, vexctl, crossplane-provider-family-aws,...

Linux Distros Unpatched Vulnerability : CVE-2026-73648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG...

GHSA-7JMF-5VCP-F672

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

CVE-2026-56858

The golang project (specifically the html/template package) contains a vulnerability where pathological inputs can cause an unescaped '/' to close early. This flaw allows attackers to inject arbitrary content into templates, potentially resulting in Cross-Site Scripting (XSS) . This issue affects...

GO-2026-6091 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

GHSA-3HVR-PHFH-X26G vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp...

CVE-2026-66460

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-70466

creationtimestamp| type| source ---|---|--- 2026-08-13 14:00:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxsk3fzpf2l...

CVE-2026-66460 WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-66460

CVE-2026-66460 affects the WordPress AfterShip Tracking plugin for WooCommerce, version

EUVD-2026-57879

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-66460 WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-66460

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues

Records obtained by WIRED detail hundreds of allegations of Customs and Border Protection workers misusing internal tools to look up romantic interests and track colleagues’ cell phones...

CVE-2026-66460: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

PT-2026-71566

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of...