GO-2024-2918 vulnerabilities

Vulnerabilities for packages: guac, sqlpad, thanos, trino, boring-registry, spire-server, chezmoi, grafana-agent-operator, rclone, terragrunt, tekton-chains, cosign, restic, secrets-store-csi-driver-provider-azure, hugo, rekor, zot, flux, py3-azure-identity, pulumi, sigstore-scaffolding, step-ca,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, ini-file, gcsfuse, caddy, cluster-api-azure-controller, eksctl, envconsul, nri-nginx, docker-cli-buildx, witness, helm-push, aws-eks-pod-identity-agent, kapp, kubernetes-dashboard-web, tkn, hubble, kube-logging-operator,...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7342: RHODF 4.19.20 release DFBUGS-7332: Backport for 4.19 - GSSODFMCG noobaa-db-pg-cluster won't...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: buildah, grype, kargo, fscrypt, terraform-provider-azurerm, splunk-otel-collector, caddy, rancher-machine, cluster-api-azure-controller, eksctl, hcloud, mods, kots, vault-benchmark, docker-cli-buildx, witness, nerdctl, podman, cilium, tkn, ksops, sops, syft,...

SUSE-SU-2026:21173-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Non security issue:...

SUSE-SU-2026:21095-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Non security issue:...

SUSE SLED15: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2026:1065-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1065-1 advisory. Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. -...

Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption...

SUSE-SU-2026:1065-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database...

SUSE-SU-2026:20771-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to sqlite3 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Update to version 3.51.3: Fix the...

Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to 3.51.3: CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption bug:...

SUSE-SU-2026:0955-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption bug...

SUSE-SU-2026:20794-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to version 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Update to version 3.51.3: Fix the...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: grype, boring-registry, terraform-provider-azurerm, terraform-provider-pagerduty, kots, actions-runner-controller, docker-cli-buildx, witness, helm-push, crossplane-provider-aws-kinesis, ksops, grafana, sops, src-fingerprint, syft, pulumi-language-java, cerbos,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: grype, boring-registry, terraform-provider-azurerm, terraform-provider-pagerduty, kots, actions-runner-controller, docker-cli-buildx, witness, helm-push, crossplane-provider-aws-kinesis, ksops, grafana, sops, src-fingerprint, syft, pulumi-language-java, cerbos,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: atlantis, crossplane-provider-aws-cognitoidentity, q, gitlab-operator, k9s, crossplane-provider-keycloak-fips, crossplane-provider-aws-efs-fips, gptscript, crossplane-provider-aws-firehose, src-fingerprint, crossplane-provider-aws-ec2-fips, witness, terragrunt-fips,...

EUVD-2023-0749

Malicious code in bioql PyPI...

SUSE-SU-2025:01799-1 Security update for postgresql, postgresql16, postgresql17

This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 , and fixes security issues with postgresql16: - bsc1230423: Relax the dependency of extensions on the server version from exact major.minor to greater or equal, after Tom Lane...

CVE-2021-38599

WAL-G before 1.1, when a non-libsodium build e.g., one of the official binary releases published as GitHub Releases is used, silently ignores the libsodium encryption key and uploads cleartext backups. This is arguably a Principle of Least Surprise violation because "the user likely wanted to...

Malicious code in wal-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f1190c63c1f6bf955ab1d1638b199634786321614c27c73a56718a80770295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...