GO-2024-2918 vulnerabilities

Vulnerabilities for packages: restic, rclone, zarf, policy-controller, rook, buildkitd, terragrunt, prometheus-operator, opentelemetry-collector, up, wal-g, opentelemetry-collector-contrib, thanos, step, grafana-mimir, guac, nuclei, boring-registry, secrets-store-csi-driver-provider-azure,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: src, cerbos, mockgen, kube-logging-operator, wal-g, pluto, oauth2-proxy, ip-masq-agent, kubecolor, kubeflow-katib, k3s, render-template, kubernetes-dashboard, docker-credential-gcr, nova, nri-apache, terraform, fulcio, helm-push, chartmuseum, cloud-provider-vsphere,...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7342: RHODF 4.19.20 release DFBUGS-7332: Backport for 4.19 - GSSODFMCG noobaa-db-pg-cluster won't...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, policy-controller, minio, opentelemetry-collector, wal-g, crossplane-provider-azure-sql, melange, step, vault-benchmark, gh, rancher-agent, scorecard, k3s, kubernetes-dashboard, dagger, fulcio, crossplane-provider-family-azure, k8sgpt,...

SUSE-SU-2026:21173-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Non security issue:...

SUSE-SU-2026:21095-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Non security issue:...

SUSE SLED15: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2026:1065-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1065-1 advisory. Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. -...

Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption...

SUSE-SU-2026:1065-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database...

SUSE-SU-2026:20771-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to sqlite3 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Update to version 3.51.3: Fix the...

Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to 3.51.3: CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption bug:...

SUSE-SU-2026:0955-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Fix the WAL-reset database corruption bug...

SUSE-SU-2026:20794-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Update to version 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension bsc1254670. - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation bsc1259619. Changelog: Update to version 3.51.3: Fix the...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: policy-controller, cerbos, wal-g, crossplane-provider-azure-sql, gitsign, crossplane-provider-aws-lambda, melange, extism, rancher-fleet, crossplane-provider-aws-cloudfront, scorecard, boring-registry, dagger, terraform-provider-pagerduty, helm-push,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: policy-controller, cerbos, wal-g, crossplane-provider-azure-sql, gitsign, crossplane-provider-aws-lambda, melange, extism, rancher-fleet, crossplane-provider-aws-cloudfront, scorecard, boring-registry, dagger, terraform-provider-pagerduty, helm-push,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: helm, boring-registry-fips, tekton-pipelines-fips, gitea, gitness, amazon-ssm-agent, buildkitd-fips, chainctl, src-fingerprint-fips, crossplane-provider-aws-firehose, argo-events-fips, grafana-fips, nuclei, cluster-api-fips, crossplane-provider-aws-route53-fips,...

EUVD-2023-0749

Malicious code in bioql PyPI...

SUSE-SU-2025:01799-1 Security update for postgresql, postgresql16, postgresql17

This update for postgresql, postgresql16, postgresql17 fixes the following issues: This update ships postgresql17 , and fixes security issues with postgresql16: - bsc1230423: Relax the dependency of extensions on the server version from exact major.minor to greater or equal, after Tom Lane...

CVE-2021-38599

WAL-G before 1.1, when a non-libsodium build e.g., one of the official binary releases published as GitHub Releases is used, silently ignores the libsodium encryption key and uploads cleartext backups. This is arguably a Principle of Least Surprise violation because "the user likely wanted to...

Malicious code in wal-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f1190c63c1f6bf955ab1d1638b199634786321614c27c73a56718a80770295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...