3 matches found
CLEANSTART-2026-YT08737 Security fixes in nginx-prometheus-exporter 1.5.1-r2
Package nginx-prometheus-exporter version 1.5.1-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...
CVE-2026-27140 vulnerabilities
Vulnerabilities for packages: kafkaexporter, cis-operator, go-jsonnet, nri-couchbase, chartmuseum, licenseclassifier, yam, openbao, cni-plugins, spire-controller-manager, kargo, consul-k8s, nri-rabbitmq, rabbitmq-default-user-credential-updater, kyverno-policy-reporter-ui, nri-cassandra, fq,...
CVE-2026-27140
The Go programming language (specifically the Go toolchain via cmd/go) is vulnerable to arbitrary code execution at build time. The root cause is a trust layer bypass where SWIG file names containing the string 'cgo ' can be used to smuggle well-crafted payloads. This issue affects the golang pac...