govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEGoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function7.5 Highgovulncheck-vulndbopenSUSEArbitrary inputs are included in errors without any escaping in net/textproto5.3 Mediumgovulncheck-vulndbopenSUSEQuadratic complexity in WordDecoder.DecodeHeader in mime7.5 Highgovulncheck-vulndbopenSUSEInefficient candidate hostname parsing in crypto/x5096.5 Mediumgovulncheck-vulndbopenSUSENezha Monitoring: Authenticated agents can forge service-monitor results for other users' services7.1 Highgovulncheck-vulndbopenSUSEClaircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints5.8 Mediumgovulncheck-vulndbopenSUSEnextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection6.9 Mediumgovulncheck-vulndbopenSUSENezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host6.4 Mediumgovulncheck-vulndbopenSUSEAuthelia Missing Username Canonicalization in Basic Auth (LDAP)2.9 Lowgovulncheck-vulndbopenSUSEExcessive resource consumption in PackBits decompression in golang.org/x/image/tiff7.5 Highgovulncheck-vulndbopenSUSEIPAM controller service account granted unnecessary full access to Secrets4.4 Mediumgovulncheck-vulndbopenSUSEGotenberg: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')7.5 Highgovulncheck-vulndbopenSUSEGotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes7.5 Highgovulncheck-vulndbopenSUSEGotenberg: Path traversal in zip entry name via Windows-style separators in upload filename8.8 Highgovulncheck-vulndbopenSUSEGitHub CLI tokens leak via `gh attestation` commands7.4 Highgovulncheck-vulndbopenSUSEArcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in Arcane7.7 Highgovulncheck-vulndbopenSUSEOpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse2.1 Lowgovulncheck-vulndbopenSUSEOpenTelemetry-Go's baggage parsing no longer caps raw header length5.3 Mediumgovulncheck-vulndbopenSUSECapsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability6.9 Mediumgovulncheck-vulndbopenSUSECapsule Namespace Hijacking via subresource3.9 Lowgovulncheck-vulndbopenSUSECVE-2026-90989.1 Criticalgovulncheck-vulndbopenSUSECVE-2026-90979.8 Criticalgovulncheck-vulndbopenSUSECVE-2026-90967.5 Highgovulncheck-vulndbopenSUSECVE-2026-90949.8 Criticalgovulncheck-vulndbopenSUSECVE-2026-90939.8 Criticalgovulncheck-vulndbopenSUSECVE-2026-90915.3 Mediumgovulncheck-vulndbopenSUSECVE-2026-90909.1 Criticalgovulncheck-vulndbopenSUSECalicoctl leaks cluster credentials to stderr when verbose logging is enabled7.2 Highgovulncheck-vulndbopenSUSEServiceAccount token disclosure via Azure IPAM CNI plugin logs6.0 Mediumgovulncheck-vulndbopenSUSEServiceAccount token disclosure via install-cni container logs6.0 Mediumgovulncheck-vulndbopenSUSEKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read7.7 Highgovulncheck-vulndbopenSUSEKata guest escape: runtime-rs guest-root to host-root escape via virtiofs9.2 Criticalgovulncheck-vulndbopenSUSEMCP Toolbox for Databases vulnerable to DNS rebinding attacks9.4 Criticalgovulncheck-vulndbopenSUSECrowdSec AppSec silently drops request body for chunked / HTTP-2 requests7.2 Highgovulncheck-vulndbopenSUSECrowdSec LAPI: Denial of Service via Unbounded Gzip Decompression8.2 Highgovulncheck-vulndbopenSUSEpicoclaw is vulnerable to OS command injection via the ExecTool component7.3 Highgovulncheck-vulndbopenSUSEKata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations5.8 Mediumgovulncheck-vulndbopenSUSEAlgernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir8.2 Highgovulncheck-vulndbopenSUSEKubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability9.9 Criticalgovulncheck-vulndbopenSUSEServer panic via outgoing webhook responses6.5 Mediumgovulncheck-vulndbopenSUSEPanic when reading out of bound palette index in golang.org/x/image/bmp5.3 Mediumgovulncheck-vulndbopenSUSEomec-project amf NGReset Message memory corruption5.3 Mediumgovulncheck-vulndbopenSUSEomec-project amf NGSetupRequest memory corruption5.3 Mediumgovulncheck-vulndbopenSUSEomec-project amf handler.go PDUSessionResourceModifyIndication memory corruption5.3 Mediumgovulncheck-vulndbopenSUSENezha WebSocket server stream discloses cross-tenant server telemetry to authenticated members6.5 Mediumgovulncheck-vulndbopenSUSENezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron9.9 Criticalgovulncheck-vulndbopenSUSEArcane: Missing admin authorization on global variables endpoint8.8 Highgovulncheck-vulndbopenSUSENezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check)7.1 Highgovulncheck-vulndbopenSUSENezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification7.7 Highgovulncheck-vulndbopenSUSEInvoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows3.3 Low- Show moreLoading…