GO-2023-1785 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2024-2568 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble...

GO-2024-2569 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble...

GO-2025-3560 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble...

GO-2026-5208 vulnerabilities

Vulnerabilities for packages: fq, temporal, temporal-ui-server, kube-metrics-adapter, snyk-cli...

GO-2024-3074 vulnerabilities

Vulnerabilities for packages: hubble-ui, cilium-cli, hubble...

GO-2024-3071 vulnerabilities

Vulnerabilities for packages: hubble-ui, cilium-cli, hubble...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: spire-server, k3s, melange, kots, zarf, step, dex, certificate-transparency, kubernetes-csi-external-provisioner, opa, kargo, spegel, terraform-docs, tflint, k8sgpt-operator, falcosidekick, osv-scanner, temporal, terraform-provider-google, conftest, ksops, sops, temp...

GO-2025-4017 vulnerabilities

Vulnerabilities for packages: frp, k3s, traefik, dkron, kyverno-policy-reporter-ui, kubo, q, kubernetes-dns-node-cache, spegel, caddy, k8sgateway, ipfs-cluster, kargo...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: step-ca, gitness, buf, step, kyverno-policy-reporter-ui, rclone, step-issuer, cloudflared, karma, gogatekeeper, caddy, sftpgo, tkn...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: spire-server, goreleaser, apache-exporter, opa, hubble, apisix-ingress-controller, crossplane-provider-aws-cloudwatchlogs, kapp-controller, sftpgo-plugin-pubsub, terraform-docs, aws-nuke, aws-flb-cloudwatch, docker-cli-buildx, flyte, kuberay-operator, karpenter, dapr...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: spire-server, goreleaser, apache-exporter, gptscript, dex, cert-manager-istio-csr, eksctl, crossplane-provider-aws-cloudwatchlogs, hubble, kapp-controller, sftpgo-plugin-pubsub, terraform-docs, fluxcd-kustomize-mutating-webhook, aws-flb-cloudwatch, kuberay-operator,...

Malicious code in cilm-ui-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008641dff89b7e4b86993671997e965642fab5620006c5ece0827f0fe72fe0d9 On npm install, the preinstall hook executes index.js which collects host identity data os.hostname, os.userInfo.username, os.homedir, current workin...

Malicious code in @dsp-next-gen-ui/needs-review (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d60392260c683ff8714400794f5f621a8c040ba0846b9fabdd194c0e6fb76b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials

Summary A client that can submit message history to a Pydantic AI UI adapter can reference arbitrary files in the application's model-provider or cloud-storage account. The server forwards the reference to the model provider, which fetches it using the server's own credentials, allowing the clien...

GHSA-H7P7-W5GC-XJ3W Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials

Summary A client that can submit message history to a Pydantic AI UI adapter can reference arbitrary files in the application's model-provider or cloud-storage account. The server forwards the reference to the model provider, which fetches it using the server's own credentials, allowing the clien...

CLEANSTART-2026-UG13000 Security fixes in temporal-ui-server-fips 2.51.1-r1

Package temporal-ui-server-fips version 2.51.1-r1 fixes 36 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CVE-2026-18622

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

EUVD-2026-57737

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...

CVE-2026-18622 Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid

Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...