govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSEBilly: Path traversal vulnerabilities8.1 Highgovulncheck-vulndbSUSEgo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion6.5 Mediumgovulncheck-vulndbSUSEPocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions8.5 Highgovulncheck-vulndbSUSEgo-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git7.0 Highgovulncheck-vulndbSUSEbettercap MySQL Server mysql_server.go integer coercion6.3 Mediumgovulncheck-vulndbSUSEKargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter5.1 Mediumgovulncheck-vulndbSUSEetcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks0.0 Nonegovulncheck-vulndbSUSEgo-ipld-prime: DAG-CBOR and DAG-JSON decoders unbounded recursion depth6.2 Mediumgovulncheck-vulndbSUSEHugo: Node tool execution allows file system access outside the project directory6.2 Mediumgovulncheck-vulndbSUSEPocketbase: Account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade6.1 Mediumgovulncheck-vulndbSUSEGoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)7.5 Highgovulncheck-vulndbSUSEFiber: XSS in AutoFormat Content Negotiation5.3 Mediumgovulncheck-vulndbSUSETraefik: Errors middleware forwards Authorization and Cookie headers to separate error page service6.9 Mediumgovulncheck-vulndbSUSEOllama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers8.8 Highgovulncheck-vulndbSUSEGoBGP: Remote Denial of Service (Panic) in UpdatePathAttrs4ByteAs via Malformed BGP UPDATE7.5 Highgovulncheck-vulndbSUSEGoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute7.5 Highgovulncheck-vulndbSUSEgithub.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters6.5 Mediumgovulncheck-vulndbSUSEOllama Tensor Model Transfer transfer.go digestToPath path traversal6.3 Mediumgovulncheck-vulndbSUSEgo-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy6.9 Mediumgovulncheck-vulndbSUSEDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field9.1 Criticalgovulncheck-vulndbSUSEgo-ntlmssp NTLM challenges can panic on malformed payloads5.3 Mediumgovulncheck-vulndbSUSERClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution9.2 Criticalgovulncheck-vulndbSUSEgo-git Credential leak via cross-host redirect in smart HTTP transport4.7 Mediumgovulncheck-vulndbSUSELego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider8.8 Highgovulncheck-vulndbSUSEDgraph: Unauthenticated pprof endpoint leaks admin auth token9.4 Criticalgovulncheck-vulndbSUSEgithub.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer7.5 Highgovulncheck-vulndbSUSEHelm Chart extraction output directory collapse via `Chart.yaml` name dot-segment4.8 Mediumgovulncheck-vulndbSUSEHelm's plugin verification fails open when .prov is missing, allowing unsigned plugin install8.4 Highgovulncheck-vulndbSUSEHelm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory8.4 Highgovulncheck-vulndbSUSEUpdate of type field in restricted TLS certificate allows privilege escalation to cluster admin9.1 Criticalgovulncheck-vulndbSUSEImporting a crafted backup leads to project restriction bypass9.1 Criticalgovulncheck-vulndbSUSEVM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf9.1 Criticalgovulncheck-vulndbSUSEOpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking7.3 Highgovulncheck-vulndbSUSEOpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)7.5 Highgovulncheck-vulndbSUSEDistribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation7.5 Highgovulncheck-vulndbSUSEDgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization10.0 Criticalgovulncheck-vulndbSUSEFerret has a Path Traversal in IO::FS::WRITE allows arbitrary file write when scraping malicious websites8.1 Highgovulncheck-vulndbSUSEHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 Mediumgovulncheck-vulndbSUSESigstore Timestamp Authority allocates excessive memory during request parsing7.5 Highgovulncheck-vulndbSUSEFulcio allocates excessive memory during token parsing7.5 Highgovulncheck-vulndbSUSEStep CA Has Authorization Bypass in ACME and SCEP Provisioners10.0 Criticalgovulncheck-vulndbSUSECoder logged sensitive objects unsanitized7.8 Highgovulncheck-vulndbSUSEImproper Authorization Check for SSH Certificate Revocation5.0 Mediumgovulncheck-vulndbSUSEDNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode7.3 Highgovulncheck-vulndbSUSEImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgovulncheck-vulndbSUSEExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgovulncheck-vulndbSUSEApptainer ineffective application of selinux and apparmor --security options4.5 Mediumgovulncheck-vulndbSUSESingluarity ineffectively applies of selinux / apparmor LSM process labels4.5 Mediumgovulncheck-vulndbSUSEgokey allows secret recovery from a seed file without the master password7.1 Highgovulncheck-vulndbSUSEUnauthorized access and subscription vulnerability in Boards3.1 Low- Show moreLoading…