govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEBeszel has an IDOR in hub API endpoints that read system ID from URL parameter3.5 Lowgovulncheck-vulndbopenSUSEAiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource6.8 Mediumgovulncheck-vulndbopenSUSEHelm's plugin verification fails open when .prov is missing, allowing unsigned plugin install8.4 Highgovulncheck-vulndbopenSUSEHelm has a path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory8.4 Highgovulncheck-vulndbopenSUSEGo-getter may allow to arbitrary filesystem reads through git operations7.5 Highgovulncheck-vulndbopenSUSEUnbounded Request Body Read in MS Teams Plugin {{/changes}} Webhook Endpoint3.7 Lowgovulncheck-vulndbopenSUSEUnbounded Request Body Read in MS Teams Plugin {{/lifecycle}} Webhook Endpoint3.7 Lowgovulncheck-vulndbopenSUSEUpdate of type field in restricted TLS certificate allows privilege escalation to cluster admin9.1 Criticalgovulncheck-vulndbopenSUSEImporting a crafted backup leads to project restriction bypass9.1 Criticalgovulncheck-vulndbopenSUSEVM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf9.1 Criticalgovulncheck-vulndbopenSUSEOpenFGA Playground Preshared Key Exposure6.5 Mediumgovulncheck-vulndbopenSUSEMinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing7.1 Highgovulncheck-vulndbopenSUSEMercure has a Topic Selector Cache Key Collision7.1 Highgovulncheck-vulndbopenSUSEmonetr: Protected Transactions Deletable via PUT5.7 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking7.3 Highgovulncheck-vulndbopenSUSEOpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies5.3 Mediumgovulncheck-vulndbopenSUSEFleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit7.8 Highgovulncheck-vulndbopenSUSEkcp's cache server is accessible without authentication or authorization checks8.2 Highgovulncheck-vulndbopenSUSECase-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x5098.2 Highgovulncheck-vulndbopenSUSEJsBraceDepth Context Tracking Bugs (XSS) in html/template6.1 Mediumgovulncheck-vulndbopenSUSEUnbounded allocation for old GNU sparse in archive/tar5.5 Mediumgovulncheck-vulndbopenSUSEUnauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls7.5 Highgovulncheck-vulndbopenSUSETOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Mediumgovulncheck-vulndbopenSUSEInefficient policy validation in crypto/x5097.5 Highgovulncheck-vulndbopenSUSEUnexpected work during chain building in crypto/x5097.5 Highgovulncheck-vulndbopenSUSEMiscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile7.1 Highgovulncheck-vulndbopenSUSEMissing bound checks can lead to memory corruption in safe Go in cmd/compile9.8 Criticalgovulncheck-vulndbopenSUSECode execution vulnerability in SWIG code generation in cmd/go8.8 Highgovulncheck-vulndbopenSUSESiYuan affected by Remote Code Execution in the Electron desktop client via stored XSS in synced table captions9.1 Criticalgovulncheck-vulndbopenSUSEOpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)7.5 Highgovulncheck-vulndbopenSUSECosign's verify-blob-attestation reports false positive when payload parsing fails4.3 Mediumgovulncheck-vulndbopenSUSEFile Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands8.1 Highgovulncheck-vulndbopenSUSEFile Browser discloses text file content via /api/resources endpoint bypassing Perm.Download check5.3 Mediumgovulncheck-vulndbopenSUSEFile Browser has an access rule bypass via HasPrefix without trailing separator in path matching6.3 Mediumgovulncheck-vulndbopenSUSEFile Browser share links remain accessible after Share/Download permissions are revoked8.2 Highgovulncheck-vulndbopenSUSEFile Browser has a Command Injection via Hook Runner7.5 Highgovulncheck-vulndbopenSUSECVE-2026-33816 in github.com/jackc/pgx9.8 Criticalgovulncheck-vulndbopenSUSECVE-2026-33815 in github.com/jackc/pgx9.8 Criticalgovulncheck-vulndbopenSUSERhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation8.2 Highgovulncheck-vulndbopenSUSEGotenberg has a ReDoS via extraHttpHeaders scope feature8.7 Highgovulncheck-vulndbopenSUSEgo-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers6.2 Mediumgovulncheck-vulndbopenSUSEOpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision5.0 Mediumgovulncheck-vulndbopenSUSEDistribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation7.5 Highgovulncheck-vulndbopenSUSEWithdrawn Advisory: go.etcd.io/bbolt affected by index out-of-range vulnerability6.2 Mediumgovulncheck-vulndbopenSUSEDistribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm7.5 Highgovulncheck-vulndbopenSUSECode Extension Marketplace has a Zip Slip Path Traversal8.7 Highgovulncheck-vulndbopenSUSEHugo does not properly escape some Markdown links5.3 Mediumgovulncheck-vulndbopenSUSEImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs9.8 Criticalgovulncheck-vulndbopenSUSEJuju: Resource poisoning7.1 Highgovulncheck-vulndbopenSUSEJuju: Read All Controller Logs From Compromised Workload6.9 Medium- Show moreLoading…