3 matches found
CLEANSTART-2026-YT08737 Security fixes in nginx-prometheus-exporter 1.5.1-r2
Package nginx-prometheus-exporter version 1.5.1-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...
CVE-2026-27140 vulnerabilities
Vulnerabilities for packages: linkerd2, tkn, kubernetes-csi-driver-nfs, spqr, yam, yace, nri-discovery-kubernetes, sbomqs, task, rabbitmq-default-user-credential-updater, gotestsum, sbom-scorecard, keda, cue, terraform-provider-sendgrid, vertical-pod-autoscaler, fluxcd-kustomize-mutating-webhook,...
CVE-2026-27140
The Go programming language (golang) is vulnerable to arbitrary code execution at build time due to a trust layer bypass in the cmd/go toolchain. The root cause involves SWIG file names containing 'cgo' combined with well-crafted payloads, which can lead to code smuggling . This vulnerability aff...