270827 matches found
GO-2025-3503 vulnerabilities
Vulnerabilities for packages: tkn, kubernetes-csi-driver-nfs, spqr, nri-discovery-kubernetes, task, cue, ksops, terraform-provider-sendgrid, vertical-pod-autoscaler, melange, kiali, crossplane-provider-aws-ec2, flux-image-reflector-controller, gatus, argo-rollouts, docker,...
GO-2025-3563 vulnerabilities
Vulnerabilities for packages: tkn, kubernetes-csi-driver-nfs, spqr, yam, yace, sbomqs, task, rabbitmq-default-user-credential-updater, gotestsum, sbom-scorecard, ksops, terraform-provider-sendgrid, vertical-pod-autoscaler, nri-jmx, libnvidia-container, flux-image-reflector-controller, gatus,...
GO-2024-2887 vulnerabilities
Vulnerabilities for packages: tkn, spqr, yam, nri-discovery-kubernetes, up, sbomqs, task, rabbitmq-default-user-credential-updater, sbom-scorecard, ksops, nri-jmx, libnvidia-container, flux-image-reflector-controller, thanos, gobuster, cri-tools, kyverno-policy-reporter-kyverno-plugin, hey, syft,...
GO-2024-2963 vulnerabilities
Vulnerabilities for packages: tkn, spqr, yam, nri-discovery-kubernetes, up, task, rabbitmq-default-user-credential-updater, sbom-scorecard, cue, vertical-pod-autoscaler, nri-jmx, libnvidia-container, flux-image-reflector-controller, thanos, gobuster, cri-tools, esbuild,...
GO-2024-2888 vulnerabilities
Vulnerabilities for packages: tkn, spqr, yam, nri-discovery-kubernetes, up, sbomqs, task, rabbitmq-default-user-credential-updater, sbom-scorecard, ksops, nri-jmx, libnvidia-container, flux-image-reflector-controller, thanos, gobuster, cri-tools, kyverno-policy-reporter-kyverno-plugin, hey, syft,...
GO-2025-3373 vulnerabilities
Vulnerabilities for packages: yace, nri-discovery-kubernetes, sbomqs, sbom-scorecard, vertical-pod-autoscaler, kiali, nri-jmx, argo-rollouts, kubernetes-dashboard-auth, thanos, gobuster, cri-tools, gitea, kubernetes, esbuild, kyverno-policy-reporter-kyverno-plugin, hey,...
CVE-2026-19014 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
PT-2026-81081
TuxCare rebuilt dompurify to address 34 CVEs. Fixed in 3.0.3-tuxcare.1...
PT-2026-80933
TuxCare rebuilt 15 packages to address 9 CVEs. Fixed in 16.0.6-tuxcare.6...
PT-2026-81090
TuxCare rebuilt 19 @angular packages to address 2 CVEs. Fixed in 8.0.0-tuxcare.4...
FreeBSD : chromium -- security fixes (8acd79a5-35ee-4076-b107-3550bbd7d118)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8acd79a5-35ee-4076-b107-3550bbd7d118 advisory. Chrome Releases reports: This update includes 41 security fixes: Tenable has extracted the...
Oracle Linux 10 : kernel (ELSA-2026-36956)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36956 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...
Oracle Linux 10 : .NET / 9.0 (ELSA-2026-54590)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54590 advisory. 9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 Tenable has extracted...
Oracle Linux 8 : .NET / 8.0 (ELSA-2026-54538)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54538 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235468 Tenable has extracted t...
CVE-2026-73420 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, jitsucom-jitsu...
CVE-2026-16908
CVE-2026-16908 affects IBM i releases 7.3, 7.4, 7.5, and 7.6. A path traversal vulnerability could let a remote authenticated attacker gain unauthorized access to arbitrary objects. The CVSS v3.1 base score is 8.5 (HIGH), with network access, high attack complexity, and privileges required at LOW...
CVE-2026-58314
The Git repository management system Gitea (specifically version 1.26.2 ) is vulnerable to Server-Side Request Forgery (SSRF) due to incorrect calculations in the *HostMatchList.checkIP() function within modules/hostmatcher/hostmatcher.go and the RedirectURL() function in modules/auth/openid/open...
DEBIAN-CVE-2026-49478
Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host redirects and attach Kubernetes ServiceAccount tokens during OIDC discovery, allowing a malicious or compromised issuer to perform blind...
