govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEgithub.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters6.5 Mediumgovulncheck-vulndbopenSUSEImproper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity Bypass5.9 Mediumgovulncheck-vulndbopenSUSENetmaker does not verify JWT signatures for host tokens8.2 Highgovulncheck-vulndbopenSUSEauthd Denial of Service and Local Privilege Escalation7.3 Highgovulncheck-vulndbopenSUSEOllama Tensor Model Transfer transfer.go digestToPath path traversal6.3 Mediumgovulncheck-vulndbopenSUSENote Mark: Unauthenticated read of notes and assets in soft-deleted public books5.3 Mediumgovulncheck-vulndbopenSUSENote Mark: OIDC-registered users authenticated by submitting password "null"9.4 Criticalgovulncheck-vulndbopenSUSECillium exposes sensitive information included in the cilium-bugtool debug archive7.9 Highgovulncheck-vulndbopenSUSEzrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write8.7 Highgovulncheck-vulndbopenSUSEHeimdall: Authorization bypass via path normalization mismatch7.8 Highgovulncheck-vulndbopenSUSEHeimdall: Case-sensitive host matching may lead to policy bypass7.8 Highgovulncheck-vulndbopenSUSEHeimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation7.8 Highgovulncheck-vulndbopenSUSEgo-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy6.9 Mediumgovulncheck-vulndbopenSUSEPicoClaw Web Launcher Management Plane restart command injection6.9 Mediumgovulncheck-vulndbopenSUSETraefik: BasicAuth middleware: timing side-channel vulnerability6.3 Mediumgovulncheck-vulndbopenSUSETraefik Kubernetes CRD allows unauthorized cross-namespace middleware binding4.8 Mediumgovulncheck-vulndbopenSUSEKata Containers: CopyFile Policy Subversion via Symlinks8.2 Highgovulncheck-vulndbopenSUSETraefik: StripPrefixRegex auth bypass via Path/RawPath desync7.8 Highgovulncheck-vulndbopenSUSETraefik: Forwarded alias spoofing top pre-auth decision bypass7.8 Highgovulncheck-vulndbopenSUSETraefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth7.8 Highgovulncheck-vulndbopenSUSEUnauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph9.8 Criticalgovulncheck-vulndbopenSUSENew API: Stripe Webhook Signature Bypass via Empty Secret Enables Unlimited Quota Fraud7.1 Highgovulncheck-vulndbopenSUSEDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field9.1 Criticalgovulncheck-vulndbopenSUSEDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field9.1 Criticalgovulncheck-vulndbopenSUSETempo query limit results in unbounded memory allocation7.5 Highgovulncheck-vulndbopenSUSEKyverno Controller Denial of Service via forEach Mutation Panic7.7 Highgovulncheck-vulndbopenSUSEmelange has Path Traversal via .PKGINFO in --persist-lint-results4.4 Mediumgovulncheck-vulndbopenSUSEmelange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses6.1 Mediumgovulncheck-vulndbopenSUSEgo-ntlmssp NTLM challenges can panic on malformed payloads5.3 Mediumgovulncheck-vulndbopenSUSEContour: Lua code injection via Cookie Path Rewrite Policy8.1 Highgovulncheck-vulndbopenSUSEArgo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller7.7 Highgovulncheck-vulndbopenSUSEgoshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS6.5 Mediumgovulncheck-vulndbopenSUSEntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function6.4 Mediumgovulncheck-vulndbopenSUSENornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access9.8 Criticalgovulncheck-vulndbopenSUSESiYuan: Incomplete Fix Bypass for CVE-2026-30869: Path Traversal via Double URL Encoding in `/export/` Endpoint7.1 Highgovulncheck-vulndbopenSUSEpgx: SQL Injection via placeholder confusion with dollar quoted string literals2.3 Lowgovulncheck-vulndbopenSUSENuclei: Local File Read via require() Module Loader Bypass5.5 Mediumgovulncheck-vulndbopenSUSEmonetr is vulnerable to server-side request forgery in Lunch Flow link creation and refresh8.3 Highgovulncheck-vulndbopenSUSEDaptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate API8.3 Highgovulncheck-vulndbopenSUSEDDEV has ZipSlip path traversal in tar and zip archive extraction6.5 Mediumgovulncheck-vulndbopenSUSEopenvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access10.0 Criticalgovulncheck-vulndbopenSUSEfree5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer5.5 Mediumgovulncheck-vulndbopenSUSEfree5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service7.5 Highgovulncheck-vulndbopenSUSEOpenFGA has Improper Policy Enforcement5.0 Mediumgovulncheck-vulndbopenSUSETekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE7.5 Highgovulncheck-vulndbopenSUSETekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion6.5 Mediumgovulncheck-vulndbopenSUSETekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check5.4 Mediumgovulncheck-vulndbopenSUSEfree5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation6.9 Mediumgovulncheck-vulndbopenSUSEExcessive memory allocation when decoding malicious SFNT in golang.org/x/image6.1 Mediumgovulncheck-vulndbopenSUSEPanic when decoding large WEBP image on 32-bit platforms in golang.org/x/image7.5 High- Show moreLoading…