govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSEamqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload8.9 Highgovulncheck-vulndbSUSEGitea: Remote Code Execution via diffpatch Git Hook Installation9.8 Criticalgovulncheck-vulndbSUSEKyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system9.6 Criticalgovulncheck-vulndbSUSEORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption6.5 Mediumgovulncheck-vulndbSUSEgenieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport8.8 Highgovulncheck-vulndbSUSEmcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist8.6 Highgovulncheck-vulndbSUSEmcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable8.4 Highgovulncheck-vulndbSUSEmcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias8.4 Highgovulncheck-vulndbSUSEkin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding8.7 Highgovulncheck-vulndbSUSEkin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS7.5 Highgovulncheck-vulndbSUSEAtlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation8.1 Highgovulncheck-vulndbSUSEInfracost: Arbitrary file read via config-template readFile symlink traversal5.9 Mediumgovulncheck-vulndbSUSEInfracost: Terraform Cloud and registry token disclosure via unvalidated hostname5.9 Mediumgovulncheck-vulndbSUSEIncus has a project restriction bypass in instance copy across projects7.7 Highgovulncheck-vulndbSUSEIncus has a project restriction bypass for custom volume copy across projects7.7 Highgovulncheck-vulndbSUSEMailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)6.5 Mediumgovulncheck-vulndbSUSEMailpit: SMTP DATA line reader buffers over-limit input before size enforcement5.3 Mediumgovulncheck-vulndbSUSEMailpit: SMTP command parser buffers unbounded command lines before syntax rejection5.3 Mediumgovulncheck-vulndbSUSEMailpit: Thumbnail generation decodes unbounded image dimensions before scaling5.3 Mediumgovulncheck-vulndbSUSEFleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database7.6 Highgovulncheck-vulndbSUSEPipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution6.5 Mediumgovulncheck-vulndbSUSEPipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header8.2 Highgovulncheck-vulndbSUSEEmber: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI4.7 Mediumgovulncheck-vulndbSUSEVouch Proxy: Unbounded Multipart Cookie Allocation DoS7.5 Highgovulncheck-vulndbSUSEOpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access5.9 Mediumgovulncheck-vulndbSUSEVelero vulnerable to file path traversal when extracting from backup's tarball5.9 Mediumgovulncheck-vulndbSUSEVictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root6.8 Mediumgovulncheck-vulndbSUSEBuildKit: Custom frontend could bypass Seccomp/AppArmor5.3 Mediumgovulncheck-vulndbSUSEInspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS6.9 Mediumgovulncheck-vulndbSUSETar extraction in moby/go-archive can write outside the destination directory via link following7.1 Highgovulncheck-vulndbSUSEVitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data5.3 Mediumgovulncheck-vulndbSUSEWITHDRAWN: Multiple denial of service vulnerabilities in rsc.io/pdf and forksNo scoregovulncheck-vulndbSUSEWITHDRAWN: Pre-protocol error reader permits unbounded memory consumption in github.com/lib/pqNo scoregovulncheck-vulndbSUSEWITHDRAWN: Backend frame lengths cause pre-validation memory exhaustion in github.com/lib/pqNo scoregovulncheck-vulndbSUSEWITHDRAWN: Malformed RowDescription and DataRow messages cause panics in github.com/lib/pqNo scoregovulncheck-vulndbSUSEWITHDRAWN: Malformed backend frame length causes panic in github.com/lib/pqNo scoregovulncheck-vulndbSUSEWITHDRAWN: Disclosure of wrong .pgpass credential via hostaddr in github.com/lib/pqNo scoregovulncheck-vulndbSUSEWITHDRAWN: Unbounded iteration count causes CPU denial of service in github.com/lib/pq/scramNo scoregovulncheck-vulndbSUSEWITHDRAWN: GSS authentication completes without mutual proof in github.com/lib/pqNo scoregovulncheck-vulndbSUSETrivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write6.8 Mediumgovulncheck-vulndbSUSEuniget: Path Traversal in Hook Files - Directory Escape Vulnerability8.4 Highgovulncheck-vulndbSUSEuniget: EDITOR Command Injection in uniget CLI1.0 Lowgovulncheck-vulndbSUSETerragrunt: Arbitrary File Deletion via Malicious Module Manifest6.9 Mediumgovulncheck-vulndbSUSENew API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass6.0 Mediumgovulncheck-vulndbSUSENew API: Integer overflow in quota billing yields negative charges (self-crediting)9.1 Criticalgovulncheck-vulndbSUSENew API: Admin can reset passkeys for same-level or higher-privileged users5.1 Mediumgovulncheck-vulndbSUSENew API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging7.5 Highgovulncheck-vulndbSUSENew API: User List API Leaks Root User Access Token Leading to Privilege Escalation9.1 Criticalgovulncheck-vulndbSUSEFabric CA: LDAP Injection via Unescaped Username in GetUser Filter6.3 Mediumgovulncheck-vulndbSUSEExcessive memory allocation during VP8L decoding in golang.org/x/image7.5 High- Show moreLoading…