govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEPanic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image7.5 Highgovulncheck-vulndbopenSUSEDaytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape4.2 Mediumgovulncheck-vulndbopenSUSEOpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions2.1 Lowgovulncheck-vulndbopenSUSEOpenTelemetry githubreceiver silently ignores configured required_headers authentication6.9 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token5.3 Mediumgovulncheck-vulndbopenSUSEPodman: WORKDIR symlink traversal vulnerability5.3 Mediumgovulncheck-vulndbopenSUSEHeimdall: IP Spoofing via Unvalidated Forwarding Headers7.0 Highgovulncheck-vulndbopenSUSEWoodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation7.1 Highgovulncheck-vulndbopenSUSEZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider4.2 Mediumgovulncheck-vulndbopenSUSEZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)7.4 Highgovulncheck-vulndbopenSUSEZITADEL: Cross-Tenant User Leakage via Recycled Identifiers2.3 Lowgovulncheck-vulndbopenSUSEMCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway8.7 Highgovulncheck-vulndbopenSUSEGotenberg: SSRF via LibreOffice document processing7.5 Highgovulncheck-vulndbopenSUSEZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components2.3 Lowgovulncheck-vulndbopenSUSEMCP Toolbox for Databases: authenticated authorization bypass8.6 Highgovulncheck-vulndbopenSUSEgoogleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)9.3 Criticalgovulncheck-vulndbopenSUSEgoogleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)9.3 Criticalgovulncheck-vulndbopenSUSECapsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected5.7 Mediumgovulncheck-vulndbopenSUSEGitea redirect handling permits open redirects through backslash paths6.1 Mediumgovulncheck-vulndbopenSUSEGitea 3D file viewer allows stored XSS through glTF extensionsRequired8.7 Highgovulncheck-vulndbopenSUSEPublic-only tokens bypass private-resource restrictions on `/api/v1/user` self routes8.1 Highgovulncheck-vulndbopenSUSEGitea organization forks can expose organization secrets without create permission8.1 Highgovulncheck-vulndbopenSUSEDaytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join6.5 Mediumgovulncheck-vulndbopenSUSETraefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services6.0 Mediumgovulncheck-vulndbopenSUSEcontainerd image-triggered runtime DoS via unbounded group parsing5.3 Mediumgovulncheck-vulndbopenSUSEcontainerd CRI checkpoint restore CDI annotation smuggling8.4 Highgovulncheck-vulndbopenSUSEcontainerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore8.2 Highgovulncheck-vulndbopenSUSEGitea repository archive downloads bypass token scope checks9.1 Criticalgovulncheck-vulndbopenSUSEGitea issue-template APIs bypass repository unit authorization4.3 Mediumgovulncheck-vulndbopenSUSEGitea user organization API bypasses public-only token filtering4.3 Mediumgovulncheck-vulndbopenSUSEGitea maintainer-edit permissions allow unauthorized commits to readable repositories8.5 Highgovulncheck-vulndbopenSUSEGitea Basic Auth bypasses OAuth2 access token scopes8.1 Highgovulncheck-vulndbopenSUSEGogs: Overwriting critical files results in a denial of service8.5 Highgovulncheck-vulndbopenSUSEGitea Git smart HTTP bypasses repository token scopes for bearer tokens8.1 Highgovulncheck-vulndbopenSUSERemark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing8.2 Highgovulncheck-vulndbopenSUSEDaytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles7.7 Highgovulncheck-vulndbopenSUSECaddy: stripHTML template function bypass4.2 Mediumgovulncheck-vulndbopenSUSECaddy: FastCGI header normalization bypass in `forward_auth copy_headers`8.1 Highgovulncheck-vulndbopenSUSECaddy: Windows `file_server` path authorization bypass via encoded backslash7.5 Highgovulncheck-vulndbopenSUSEDaytona: Public sandbox previews remain accessible for up to one hour after being made private7.0 Highgovulncheck-vulndbopenSUSETraefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts7.8 Highgovulncheck-vulndbopenSUSEHugo: Symlink confinement bypass in resources.Get6.9 Mediumgovulncheck-vulndbopenSUSEHugo: security.http.urls allow-list bypass via HTTP redirects6.3 Mediumgovulncheck-vulndbopenSUSEHugo: XSS via text/html content files5.1 Mediumgovulncheck-vulndbopenSUSETraefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass7.8 Highgovulncheck-vulndbopenSUSEBuildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive6.3 Mediumgovulncheck-vulndbopenSUSErunc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations3.3 Lowgovulncheck-vulndbopenSUSEOliveTin: ValidateArgumentType API Endpoint Missing Authentication Allows Action and Argument Enumeration3.7 Lowgovulncheck-vulndbopenSUSEOliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination7.5 Highgovulncheck-vulndbopenSUSEFilestash allows attackers to escalate privileges via sending a crafted request8.1 High- Show moreLoading…