govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEDoS in Quill via unbounded read of HTTP response body during notarization5.3 Mediumgovulncheck-vulndbopenSUSEUnbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing5.5 Mediumgovulncheck-vulndbopenSUSESSRF in Quill via unvalidated URL from Apple notarization log retrieval5.3 Mediumgovulncheck-vulndbopenSUSEAllocation of Resources Without Limits or Throttling in flagd7.5 Highgovulncheck-vulndbopenSUSEOliveTin's unsafe parsing of UniqueTrackingId can be used to write files8.5 Highgovulncheck-vulndbopenSUSESiYuan has a SVG Sanitizer Bypass via Whitespace in `javascript:` URI — Unauthenticated XSS6.4 Mediumgovulncheck-vulndbopenSUSESiYuan has a SVG Sanitizer Bypass via `<animate>` Element — Unauthenticated XSS6.4 Mediumgovulncheck-vulndbopenSUSEzot create-only policy allows overwrite attempts of existing latest tag (update permission not required)7.7 Highgovulncheck-vulndbopenSUSEFileBrowser Quantum: Stored XSS in public share page via unsanitized share metadata (text/template misuse)8.9 Highgovulncheck-vulndbopenSUSEFileBrowser Quantum Incomplete Remediation of CVE-2026-27611: Password-Protected Share Bypass via /public/api/share/info7.5 Highgovulncheck-vulndbopenSUSESiYuan Note publish service authorization bypass allows low-privilege users to modify notebook content7.1 Highgovulncheck-vulndbopenSUSEkubewarden-controller cross-namespace data exfiltration via deprecated host callback binding4.3 Mediumgovulncheck-vulndbopenSUSEPocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange8.5 Highgovulncheck-vulndbopenSUSEPocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion7.1 Highgovulncheck-vulndbopenSUSENetmaker: Service User with Network Access Can Access config files with WireGuard Private Keys8.7 Highgovulncheck-vulndbopenSUSENetmaker: Privilege Escalation from Admin to Super-Admin via User Update6.9 Mediumgovulncheck-vulndbopenSUSENetmaker: Insufficient Authorization in Host Token Verification8.6 Highgovulncheck-vulndbopenSUSESiYuan has a Path Traversal in /export Endpoint Allows Arbitrary File Read and Secret Leakage9.3 Criticalgovulncheck-vulndbopenSUSEWeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation10.0 Criticalgovulncheck-vulndbopenSUSEWeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool10.0 Criticalgovulncheck-vulndbopenSUSEWeKnora: Broken Access Control - Cross-Tenant Data Exposure5.3 Mediumgovulncheck-vulndbopenSUSEWeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources6.5 Mediumgovulncheck-vulndbopenSUSEWeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning5.3 Mediumgovulncheck-vulndbopenSUSEWeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection5.9 Mediumgovulncheck-vulndbopenSUSEWeKnora: Broken Access Control in Tenant Management8.8 Highgovulncheck-vulndbopenSUSECaddy: vars_regexp double-expands user input, leaking env vars and files5.5 Mediumgovulncheck-vulndbopenSUSECaddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation8.1 Highgovulncheck-vulndbopenSUSESoft Serve: SSRF via unvalidated LFS endpoint in repo import9.1 Criticalgovulncheck-vulndbopenSUSEURLs in meta content attribute actions are not escaped in html/template6.1 Mediumgovulncheck-vulndbopenSUSEFileInfo can escape from a Root in os2.5 Lowgovulncheck-vulndbopenSUSEIncorrect parsing of IPv6 host literals in net/url7.5 Highgovulncheck-vulndbopenSUSEPanic in name constraint checking for malformed certificates in crypto/x5095.9 Mediumgovulncheck-vulndbopenSUSEIncorrect enforcement of email constraints in crypto/x5097.5 Highgovulncheck-vulndbopenSUSEPinchTab: SSRF with Full Response Exfiltration via Download Handler7.5 Highgovulncheck-vulndbopenSUSEZarf: Symlink targets in archives are not validated against destination directory8.2 Highgovulncheck-vulndbopenSUSECoreDNS ACL Bypass7.7 Highgovulncheck-vulndbopenSUSECoreDNS Loop Detection Denial of Service Vulnerability7.5 Highgovulncheck-vulndbopenSUSEWeKnora: SSRF via Redirection5.9 Mediumgovulncheck-vulndbopenSUSEOliveTin: View permission not being checked when returning dashboards6.5 Mediumgovulncheck-vulndbopenSUSEOliveTin: RestartAction always runs actions as guest5.3 Mediumgovulncheck-vulndbopenSUSEOliveTin: Session Fixation - Logout Fails to Invalidate Server-Side Session5.4 Mediumgovulncheck-vulndbopenSUSEOliveTin: JWT Audience Validation Bypass in Local Key and HMAC Modes8.8 Highgovulncheck-vulndbopenSUSEGokapi: CSRF in Login Endpoint4.6 Mediumgovulncheck-vulndbopenSUSEGokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion5.4 Mediumgovulncheck-vulndbopenSUSEGokapi: Privilege escalation with auth token5.0 Mediumgovulncheck-vulndbopenSUSEGogs: DOM-based XSS via milestone selection7.3 Highgovulncheck-vulndbopenSUSEGogs: Access tokens get exposed through URL params in API requests6.9 Mediumgovulncheck-vulndbopenSUSEGogs: Stored XSS in branch and wiki views through author and committer names6.9 Mediumgovulncheck-vulndbopenSUSEGokapi: Stored XSS in SVG Hotlinks8.7 Highgovulncheck-vulndbopenSUSEGogs: Release tag option injection in release deletion8.8 High- Show moreLoading…