AZL-103143 CVE-2026-81869 affecting package cert-manager for versions less than 1.12.15-14

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

AZL-103221 CVE-2026-81869 affecting package kubernetes 1.30.10-30

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

AZL-103233 CVE-2026-81869 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

AZL-103179 CVE-2026-81869 affecting package kata-containers-cc 3.15.0.aks0-21

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

DEBIAN-CVE-2026-81869

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

AZL-103073 CVE-2026-81869 affecting package cri-o 1.30.1-1

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

CVE-2026-81869

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

CVE-2026-81869

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

EUVD-2026-81260

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce AttributeValueLengthLimit for string and string-slice attributes containing the valid Unicode replacement character U+FFFD...

Astra Linux – Vulnerability in u-boot

A issue was discovered in Das U-Boot during the period from 2019.07. There is an unbounded memcpy operation when parsing a UDP packet, due to an underflow of the netprocessreceivedpacket integer value during the ncinputpacket call...

Astra Linux – Vulnerability in u-boot

A issue was discovered in Das U-Boot during the period from 2019.07. There is a stack-based buffer overflow in the nfshandler reply helper function: nfsmountreply...

Astra Linux – Vulnerability in u-boot

The U-Boot 2022.01 has a Buffer Overflow issue...

CVE-2026-89240: Improper Neutralization of Input During Web Page Generation

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in plugin/Live/confirmLivePassword.php. The script interpolates the unauthenticated GET parameter u which is not covered by $securityFilter directly into an attribute withou...

GO-2026-6435 Semaphore U: OS Command Injection in github.com/semaphoreui/semaphore

Semaphore U: OS Command Injection in github.com/semaphoreui/semaphore...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control mechanisms, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to the lack of security measures for website structures, allows attackers to intercept sessions and gain access to user accounts.

The vulnerability of the software for secure file sharing and transmission related to SolarWinds Serv-U lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain access to the user account...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control mechanisms, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U, related to bypassing authentication using a user-controlled key, allows a perpetrator to intercept sessions and gain access to the account.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the ability to bypass authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely intercept sessions and gain control of the user account...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, due to lack of access control, allows a perpetrator to elevate their privileges and execute commands as the root user.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute code under the identity of “root”...

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows attackers to create administrator accounts.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to create administrator accounts remotely...