govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEomec-project amf NGAP Message memory corruption5.3 Mediumgovulncheck-vulndbopenSUSEGryph Agents Payload Filter Fails to Strip Tool Payload for Sensitive Content5.5 Mediumgovulncheck-vulndbopenSUSECrabbox < 0.9.0 Path Traversal via Islo Provider Workspace Resolution6.8 Mediumgovulncheck-vulndbopenSUSEbird-lg-go: Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding7.5 Highgovulncheck-vulndbopenSUSELocal Path Provisioner: HelperPod Template Injection8.7 Highgovulncheck-vulndbopenSUSECloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE9.4 Criticalgovulncheck-vulndbopenSUSEElla Core: Handover failures during concurrent Security Mode Command3.7 Lowgovulncheck-vulndbopenSUSEElla Core: UE Security Capability bypass on NGAP PathSwitchRequest6.1 Mediumgovulncheck-vulndbopenSUSECVE-2026-68155.9 Mediumgovulncheck-vulndbopenSUSEElla Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse7.1 Highgovulncheck-vulndbopenSUSEgo-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git7.0 Highgovulncheck-vulndbopenSUSEDozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication8.7 Highgovulncheck-vulndbopenSUSEGotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass8.6 Highgovulncheck-vulndbopenSUSEbettercap MySQL Server mysql_server.go integer coercion6.3 Mediumgovulncheck-vulndbopenSUSEbettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion6.3 Mediumgovulncheck-vulndbopenSUSEfree5GC: NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions10.0 Criticalgovulncheck-vulndbopenSUSEfree5GC: SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers10.0 Criticalgovulncheck-vulndbopenSUSEfree5GC: SMF UPI DELETE /upi/v1/upNodesLinks/{ref} panics on AN-node deletion via nil UPF dereference; unauthenticated, state-mutating8.2 Highgovulncheck-vulndbopenSUSEfree5GC: NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler10.0 Criticalgovulncheck-vulndbopenSUSEfree5GC: NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions9.4 Criticalgovulncheck-vulndbopenSUSEfree5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)7.5 Highgovulncheck-vulndbopenSUSEfree5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing UE state via nil interface type assertion (single authenticated request)6.5 Mediumgovulncheck-vulndbopenSUSEfree5GC: UDR nudr-dr DELETE amf-subscriptions panics on missing subsId when UE state exists (nil pointer dereference)4.3 Mediumgovulncheck-vulndbopenSUSEfree5GC: NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference7.5 Highgovulncheck-vulndbopenSUSEfree5GC: SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf)7.5 Highgovulncheck-vulndbopenSUSEfree5GC: NEF nnef-callback route group is unauthenticated; forged callback requests are accepted into the processing path7.3 Highgovulncheck-vulndbopenSUSEfree5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)7.5 Highgovulncheck-vulndbopenSUSEfree5GC: BSF concurrent PUT /nbsf-management/v1/subscriptions/{subId} crashes the BSF process via concurrent map read/write on Subscriptions6.5 Mediumgovulncheck-vulndbopenSUSEfree5GC: PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference6.5 Mediumgovulncheck-vulndbopenSUSEfree5GC: PCF npcf-smpolicycontrol POST /sm-policies panics on downstream UDR/OpenAPI 404 via nil pointer dereference7.5 Highgovulncheck-vulndbopenSUSEfree5GC: NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions9.4 Criticalgovulncheck-vulndbopenSUSEgitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits5.3 Mediumgovulncheck-vulndbopenSUSEKargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter5.1 Mediumgovulncheck-vulndbopenSUSEVolcano: Webhook server vulnerable to OOM due to unbounded HTTP request body size6.8 Mediumgovulncheck-vulndbopenSUSESiYuan: URL-encoded title bypasses `escapeAriaLabel`, decoded by `decodeURIComponent` into a tooltip-XSS9.4 Criticalgovulncheck-vulndbopenSUSEgitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers5.4 Mediumgovulncheck-vulndbopenSUSEExternal Secrets Operator: Privilege escalation with secret overwriting4.9 Mediumgovulncheck-vulndbopenSUSEMCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist6.3 Mediumgovulncheck-vulndbopenSUSEMCP Registry: Stored XSS in catalogue UI via attribute-quote breakout in publisher-controlled `websiteUrl`5.1 Mediumgovulncheck-vulndbopenSUSEZITADEL: LDAP Filter Injection in Login Flow7.5 Highgovulncheck-vulndbopenSUSEMCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience2.1 Lowgovulncheck-vulndbopenSUSEMCP Registry: Open Redirect0.0 Nonegovulncheck-vulndbopenSUSESiYuan: Stored XSS via Attribute View name to Electron renderer RCE in SiYuan9.4 Criticalgovulncheck-vulndbopenSUSENote Mark: JWT Secret Weakness allows Full Account Takeover via token forgery10.0 Criticalgovulncheck-vulndbopenSUSENote Mark: Arbitrary File Write via Path Traversal in Asset Names Leading to Remote Code Execution8.6 Highgovulncheck-vulndbopenSUSEMalicious module proxy can bypass checksum database in cmd/go7.5 Highgovulncheck-vulndbopenSUSEQuadratic string concatenation in consumePhrase in net/mail7.5 Highgovulncheck-vulndbopenSUSEPanic in Dial and LookupPort when handling NUL byte on Windows in net7.5 Highgovulncheck-vulndbopenSUSEEscaper bypass leads to XSS in html/template6.1 Mediumgovulncheck-vulndbopenSUSEReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil5.3 Medium- Show moreLoading…