3 matches found
CLEANSTART-2026-YT08737 Security fixes in nginx-prometheus-exporter 1.5.1-r2
Package nginx-prometheus-exporter version 1.5.1-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...
CVE-2026-27140 vulnerabilities
Vulnerabilities for packages: tigera-operator, dbmate, percona-server-mongodb-operator, aactl, iptables-wrappers, kubernetes-csi-external-attacher, juicefs-csi-driver, cosign, kapp, hivemind, rancher-system-upgrade-controller, licenseclassifier, secrets-store-csi-driver-provider-azure, lvm-driver...
CVE-2026-27140
The Go programming language (golang) is vulnerable to arbitrary code execution at build time due to a trust layer bypass in the cmd/go toolchain. The root cause involves SWIG file names containing 'cgo' combined with well-crafted payloads, which can lead to code smuggling . This vulnerability aff...