govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEMinIO: JWT Algorithm Confusion in OIDC Authentication9.2 Criticalgovulncheck-vulndbopenSUSEElla Core panics on malformed ULNASTransport Message without a Request Type6.5 Mediumgovulncheck-vulndbopenSUSEElla Core panics on malformed NGAP Location Report7.5 Highgovulncheck-vulndbopenSUSEElla Core panics on invalid PDU Session IDs in NGAP messages6.5 Mediumgovulncheck-vulndbopenSUSEImproper Validation of Array Index in Packetbeat Leading to Denial of Service5.7 Mediumgovulncheck-vulndbopenSUSEMemory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service5.7 Mediumgovulncheck-vulndbopenSUSEMCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion7.1 Highgovulncheck-vulndbopenSUSEqui CORS Misconfiguration: Arbitrary Origins Trusted9.0 Criticalgovulncheck-vulndbopenSUSEStep CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)10.0 Criticalgovulncheck-vulndbopenSUSEDasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service6.2 Mediumgovulncheck-vulndbopenSUSENhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload2.1 Lowgovulncheck-vulndbopenSUSETekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod9.6 Criticalgovulncheck-vulndbopenSUSEgoxmldsig has validateSignature Loop Variable Capture Signature Bypass7.5 Highgovulncheck-vulndbopenSUSEfree5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques8.7 Highgovulncheck-vulndbopenSUSEfree5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error8.7 Highgovulncheck-vulndbopenSUSESiYuan has an Unauthenticated WebSocket DoS via Auth Keepalive Bypass7.5 Highgovulncheck-vulndbopenSUSESiYuan has an Incomplete Fix for IsSensitivePath Denylist Allows File Read from /opt, /usr, /home6.8 Mediumgovulncheck-vulndbopenSUSEgRPC-Go has an authorization bypass via missing leading slash in :path9.1 Criticalgovulncheck-vulndbopenSUSEfree5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request6.9 Mediumgovulncheck-vulndbopenSUSEfree5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference8.7 Highgovulncheck-vulndbopenSUSEfree5GC AUSF UE Authentication Panic on Nil SuciSupiMap Interface Conversion8.7 Highgovulncheck-vulndbopenSUSEfree5GC NRF Discovery EncodeGroupId Function Panics on Malformed group-id-list Parameter8.7 Highgovulncheck-vulndbopenSUSEfree5GC CHF has Out-of-Bounds Slice Access that Leads to DoS7.1 Highgovulncheck-vulndbopenSUSEZITADEL is missing enforcement of organization scopes5.3 Mediumgovulncheck-vulndbopenSUSEPinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation5.8 Mediumgovulncheck-vulndbopenSUSESiYuan has Stored XSS to RCE via Unsanitized Bazaar Package Metadata5.3 Mediumgovulncheck-vulndbopenSUSESiYuan has Stored XSS to RCE via Unsanitized Bazaar README Rendering5.3 Mediumgovulncheck-vulndbopenSUSEHeimdall: Path received via Envoy gRPC corrupted when containing query string8.2 Highgovulncheck-vulndbopenSUSEFile Browser has an Authorization Policy Bypass in its Public Share Download Flow6.5 Mediumgovulncheck-vulndbopenSUSEInsecure Direct Object Reference attack via predictable secret ID in Juju6.6 Mediumgovulncheck-vulndbopenSUSEUnauthorized access to Kubernetes secrets in Juju8.8 Highgovulncheck-vulndbopenSUSEUnauthorized update of out-of-scope Vault secrets7.6 Highgovulncheck-vulndbopenSUSETiming ownership claim attack on new external back-end secrets5.3 Mediumgovulncheck-vulndbopenSUSES3 SSE-C Encryption Key Exposed in Plaintext via Config Endpoint (CVE-2025-41118 Pattern)7.5 Highgovulncheck-vulndbopenSUSEInfinite loop in github.com/antchfx/xpath7.5 Highgovulncheck-vulndbopenSUSETekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun6.5 Mediumgovulncheck-vulndbopenSUSETillitis: TKey Client has an Error in Protocol Implementation4.7 Mediumgovulncheck-vulndbopenSUSESliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports5.7 Mediumgovulncheck-vulndbopenSUSEKube-router Proxy Module Blindly Trusts ExternalIPs/LoadBalancer IPs Enabling Cluster-Wide Traffic Hijacking and DNS DoS7.1 Highgovulncheck-vulndbopenSUSESiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)9.3 Criticalgovulncheck-vulndbopenSUSESiYuan has an Arbitrary File Read in its Desktop Publish Service9.9 Criticalgovulncheck-vulndbopenSUSEKargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration5.1 Mediumgovulncheck-vulndbopenSUSEFullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace7.1 Highgovulncheck-vulndbopenSUSERomeo is vulnerable to Archive Slip due to missing checks in sanitization8.3 Highgovulncheck-vulndbopenSUSEMonitoring is vulnerable to Archive Slip due to missing checks in sanitization8.8 Highgovulncheck-vulndbopenSUSERomeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace7.9 Highgovulncheck-vulndbopenSUSEChall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespace7.9 Highgovulncheck-vulndbopenSUSEFile Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter6.5 Mediumgovulncheck-vulndbopenSUSESiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API9.8 Criticalgovulncheck-vulndbopenSUSEFile Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin10.0 Critical- Show moreLoading…