CVE-2026-19835 Webkul Bagisto Customer Item Deletion Endpoint access control

A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available an...

GO-2023-2048 vulnerabilities

Vulnerabilities for packages: up, k3s, ctop...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: chartmuseum, cilium-cli, trivy, flux-helm-controller, k9s, eksctl, kubescape, up, k8sgpt, helm-operator, flux-source-controller, kots, zot, kubevela, zarf, helm-push...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: chartmuseum, cilium-cli, trivy, flux-helm-controller, k9s, eksctl, kubescape, up, k8sgpt, helm-operator, flux-source-controller, kots, zot, kubevela, zarf, helm-push...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: helm, apko, up, ctop, melange, ko, bom...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: helm, apko, up, ctop, melange, ko, bom...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: helm, apko, up, ctop, melange, ko, bom...

GO-2023-2048 vulnerabilities

Vulnerabilities for packages: ctop, up, k3s...

GO-2024-2554 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, chartmuseum, k9s, helm-operator, kubevela, kubescape, helm-push, zot, trivy, zarf, eksctl, cilium-cli, flux-helm-controller, k8sgpt, up...

GO-2024-2575 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kots, chartmuseum, k9s, helm-operator, kubevela, kubescape, helm-push, zot, trivy, zarf, eksctl, cilium-cli, flux-helm-controller, k8sgpt, up...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kots, k3d, grype, buildkitd, melange, eksctl, skaffold, kubescape, zot, cilium-cli, fuse-overlayfs-snapshotter, trivy, kaniko, helm, flux-helm-controller, k8sgpt, flux-source-controller, ctop, kubevela, gitness, newrelic-infrastructure-agent, helm-push, up...

GO-2023-2113 vulnerabilities

Vulnerabilities for packages: kubernetes, kubevela, caddy, prometheus-adapter, buildkitd, up, k3s...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: apko, bom, ctop, ko, melange, helm, up...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: apko, bom, ctop, ko, melange, helm, up...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: apko, bom, ctop, ko, melange, helm, up...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trino, opentelemetry-collector-contrib, tekton-chains, fulcio, falcoctl, grafana-mimir, sqlpad, flux, buildkitd, timestamp-authority, airflow, pulumi, tkn, step, prometheus-operator, grafana-agent-operator, kubescape, rclone, py3-azure-identity, wal-g, argo-events,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: buf, crossplane, docker-compose, syft, grype, buildkitd, melange, tkn, wolfictl, kubescape, conftest, zot, cilium-cli, trivy, spire-server, dagger, kargo, kaniko, cadvisor, ctop, ko, aactl, up...

CVE-2026-61967

Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...

DEBIAN-CVE-2026-73620

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout and TagReference.create, allowing attackers to pass unsafe options via kwargs. Attackers can use --prefix to overwrite arbitrary files with repository content or -F to read arbitrary files returned in-band...

CVE-2026-16538 TeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up

The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value...