wasmforge

WasmForge WasmForge compiles Go and C programs to WebAssembly, then packages them as single native binaries. The resulting executables sandbox guest code inside a WASM runtime a per-build fork of wazero. From inside that sandbox, guests get transparent access to networking, raw sockets, Win32 API...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: kubescape, kapp-controller, vault-benchmark, kubernetes-dashboard-auth, rabbitmq-cluster-operator, local-path-provisioner, steampipe, spicedb, neuvector-dbgen, wuzz, knative-eventing, ingress-nginx-controller, sealed-secrets, php-fpmexporter, tempo, cilium, q,...

CLEANSTART-2026-PK92575 ParseAddress function constructs domain-literal address components through repeated string concatenation

Security vulnerability affects the wazero package. The ParseAddress function constructs domain-literal address components through repeated string concatenation...

[SECURITY] Fedora 42 Update: golang-github-tetratelabs-wazero-1.11.0-1.fc42

WebAssembly is a way to safely run code compiled in other languages. Runtimes execute WebAssembly Modules Wasm, which are most often binaries with a .wasm extension. wazero is a WebAssembly Core Specification 1.0 and 2.0 compliant runtime written in Go. It has zero dependencies, and doesn't rely ...

Fedora 42 : golang-github-tetratelabs-wazero (2026-b793fa382f)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b793fa382f advisory. - Update to 1.11.0 upstream release - Resolves: rhbz2413614 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora: Security Advisory (FEDORA-2026-b793fa382f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, kubebuilder, influxd, xcaddy, local-path-provisioner-fips, cloud-sql-proxy, stern, spark-operator-fips, cri-tools, yunikorn-web-fips, lazydocker, kubevela, kube-oidc-proxy, render-template, knative-eventing, pulumi-kubernetes-operator,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, kubebuilder, influxd, xcaddy, local-path-provisioner-fips, cloud-sql-proxy, stern, spark-operator-fips, cri-tools, yunikorn-web-fips, lazydocker, kubevela, kube-oidc-proxy, render-template, knative-eventing, pulumi-kubernetes-operator,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, kubebuilder, influxd, xcaddy, local-path-provisioner-fips, cloud-sql-proxy, stern, spark-operator-fips, cri-tools, yunikorn-web-fips, lazydocker, kubevela, kube-oidc-proxy, render-template, knative-eventing, pulumi-kubernetes-operator,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, kubebuilder, influxd, xcaddy, local-path-provisioner-fips, cloud-sql-proxy, stern, spark-operator-fips, cri-tools, yunikorn-web-fips, lazydocker, kubevela, kube-oidc-proxy, render-template, knative-eventing, pulumi-kubernetes-operator,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, kubebuilder, influxd, xcaddy, local-path-provisioner-fips, cloud-sql-proxy, stern, spark-operator-fips, cri-tools, yunikorn-web-fips, lazydocker, kubevela, kube-oidc-proxy, render-template, knative-eventing, pulumi-kubernetes-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, prometheus-node-exporter-fips, vault-k8s, shfmt, node-problem-detector-fips, secrets-store-csi-driver-fips, octo-sts, eks-distro-fips, knative-eventing, local-path-provisioner, openbao-k8s-fips, cluster-api, karpenter-fips, confluent-common-docker,...