govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbSUSEZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions5.5 Mediumgovulncheck-vulndbSUSErclone: source object names can escape the configured root on upload5.3 Mediumgovulncheck-vulndbSUSErclone: S3 multipart declared-length memory exhaustion7.5 Highgovulncheck-vulndbSUSErclone: RC per-server auth-proxy bypass9.1 Criticalgovulncheck-vulndbSUSErclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass9.8 Criticalgovulncheck-vulndbSUSErclone: FTP cross-session auth-proxy backend confusion7.3 Highgovulncheck-vulndbSUSErclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination7.1 Highgovulncheck-vulndbSUSErclone local: crafted Range request against a translated symlink panics (DoS)5.3 Mediumgovulncheck-vulndbSUSErclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace6.3 Mediumgovulncheck-vulndbSUSErclone: http backend forwards custom/auth headers to a different host on redirect3.7 Lowgovulncheck-vulndbSUSETraefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging8.8 Highgovulncheck-vulndbSUSETraefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization7.0 Highgovulncheck-vulndbSUSETraefik HTTP/3 Backend NTLM Connection Reuse9.1 Criticalgovulncheck-vulndbSUSETraefik entrypoint header-name sanitization bypassed via request trailers7.0 Highgovulncheck-vulndbSUSETraefik: ForwardAuth identity spoofing via dot-form header alias5.3 Mediumgovulncheck-vulndbSUSETraefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded5.3 Mediumgovulncheck-vulndbSUSEidentrail: Cross-tenant GitHub installation binding without ownership verification8.5 Highgovulncheck-vulndbSUSEJoker linter executed project-local .jokerd/linter.* files during linting7.8 Highgovulncheck-vulndbSUSEwebhookd: Unrestricted HTTP Header to Shell Variable Injection6.5 Mediumgovulncheck-vulndbSUSELF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint5.5 Mediumgovulncheck-vulndbSUSELF Edge eKuiper: SSRF in External Service5.5 Mediumgovulncheck-vulndbSUSELF Edge eKuiper: Self-XSS in External Service Creation3.7 Lowgovulncheck-vulndbSUSEcontainerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service6.8 Mediumgovulncheck-vulndbSUSEgRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers8.7 Highgovulncheck-vulndbSUSEOpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool6.5 Mediumgovulncheck-vulndbSUSEPrevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh7.5 Highgovulncheck-vulndbSUSEPrevent DoS on deadlocked established channel in golang.org/x/crypto/ssh7.5 Highgovulncheck-vulndbSUSEgRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation8.7 Highgovulncheck-vulndbSUSEgRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion6.3 Mediumgovulncheck-vulndbSUSEfree5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA3.7 Lowgovulncheck-vulndbSUSEfree5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI7.5 Highgovulncheck-vulndbSUSEKlever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply8.7 Highgovulncheck-vulndbSUSEArc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset6.9 Mediumgovulncheck-vulndbSUSEKlever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits8.7 Highgovulncheck-vulndbSUSEALOS HTTP: Unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server7.5 Highgovulncheck-vulndbSUSEBifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL8.7 Highgovulncheck-vulndbSUSEfree5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints9.3 Criticalgovulncheck-vulndbSUSEVikunja: Authenticated cross-tenant kanban-bucket relocation via `project_view_id` mass-assignment5.0 Mediumgovulncheck-vulndbSUSEVikunja: Cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id7.1 Highgovulncheck-vulndbSUSEVikunja: Improper Authorization and Authorization Bypass Through User-Controlled Key in code.vikunja.io/api8.1 Highgovulncheck-vulndbSUSEVikunja incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=04.3 Mediumgovulncheck-vulndbSUSEVikunja: Project duplication bypasses write-permission check on the target parent project5.3 Mediumgovulncheck-vulndbSUSEPocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none4.3 Mediumgovulncheck-vulndbSUSEaqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory6.6 Mediumgovulncheck-vulndbSUSEKlever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)9.6 Criticalgovulncheck-vulndbSUSEKlever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)9.6 Criticalgovulncheck-vulndbSUSEKubeVela Terraform remote loader DoS via unbounded file read8.5 Highgovulncheck-vulndbSUSEHatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe6.4 Mediumgovulncheck-vulndbSUSESource-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh7.5 High- Show olderLoading…