govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEgoshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags8.1 Highgovulncheck-vulndbopenSUSEoras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction7.1 Highgovulncheck-vulndbopenSUSEoras-go: file store write outside workingDir via symlink traversal6.9 Mediumgovulncheck-vulndbopenSUSEoras-go: credential forwarding via unvalidated Location header in blob upload7.5 Highgovulncheck-vulndbopenSUSEoras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens2.1 Lowgovulncheck-vulndbopenSUSEMailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)5.3 Mediumgovulncheck-vulndbopenSUSERancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer9.9 Criticalgovulncheck-vulndbopenSUSERancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml5.0 Mediumgovulncheck-vulndbopenSUSESUSE Rancher Fleet had an Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components8.3 Highgovulncheck-vulndbopenSUSEFleet has PSS Bypass through addLabelsFromOptions in Fleet Agent8.8 Highgovulncheck-vulndbopenSUSECentrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass8.2 Highgovulncheck-vulndbopenSUSEPion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message6.3 Mediumgovulncheck-vulndbopenSUSEConcourse login flow has an open redirect issue0.0 Nonegovulncheck-vulndbopenSUSESigstore Timestamp Authority: OOM due to unbounded metric label cardinality5.9 Mediumgovulncheck-vulndbopenSUSEFulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage8.7 Highgovulncheck-vulndbopenSUSEProbo has an open redirect bypass via path normalization4.7 Mediumgovulncheck-vulndbopenSUSEOver-inclusive team membership expansion in GitHub App authentication provider for Rancher8.8 Highgovulncheck-vulndbopenSUSEDgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query7.5 Highgovulncheck-vulndbopenSUSEPath Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder9.3 Criticalgovulncheck-vulndbopenSUSERancher Privilege Escalation from Project Owner to Host9.4 Criticalgovulncheck-vulndbopenSUSEregclient may leak authentication credentials to external blob stores6.8 Mediumgovulncheck-vulndbopenSUSENebula Mesh: Web UI lacks ownership checks, enabling cross-operator access to hosts and networks (read, block, delete)8.8 Highgovulncheck-vulndbopenSUSEturso-cli persists Turso platform JWT with world-readable (0o644) file permissions5.5 Mediumgovulncheck-vulndbopenSUSEFleet: Cross-Team Policy Data Exposure via Global Policy Read Endpoint4.3 Mediumgovulncheck-vulndbopenSUSEPanic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image7.5 Highgovulncheck-vulndbopenSUSEIncus has an arbitrary file write on its client due to trusted image hash9.9 Criticalgovulncheck-vulndbopenSUSEIncus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)2.1 Lowgovulncheck-vulndbopenSUSEIncus has an argument injection in backup compression algorithm leading to AFW and ACE9.9 Criticalgovulncheck-vulndbopenSUSEIncus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}2.1 Lowgovulncheck-vulndbopenSUSEIncus has an arbitrary file write via path traversal in S3 multipart upload9.9 Criticalgovulncheck-vulndbopenSUSEIncus has arbitrary file read+write on host via templates/ symlink in malicious image9.9 Criticalgovulncheck-vulndbopenSUSEIncus has a restricted project bypass leading to arbitrary command execution9.9 Criticalgovulncheck-vulndbopenSUSEIncus has an arbitrary file write on host via `exec-output` symlink in crafted image9.9 Criticalgovulncheck-vulndbopenSUSEIncus has an arbitrary file read+write on host via rootfs/ symlink in malicious image9.9 Criticalgovulncheck-vulndbopenSUSEEcho: Encoded slash (%2F) bypasses route-level protection and exposes static files7.5 Highgovulncheck-vulndbopenSUSEGitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion6.0 Mediumgovulncheck-vulndbopenSUSESeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access7.8 Highgovulncheck-vulndbopenSUSEK3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression5.8 Mediumgovulncheck-vulndbopenSUSEFile Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)9.3 Criticalgovulncheck-vulndbopenSUSEFile Browser: Authentication Bypass via Proxy Auth Header Forgery9.1 Criticalgovulncheck-vulndbopenSUSEFile Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup8.2 Highgovulncheck-vulndbopenSUSETrivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser6.9 Mediumgovulncheck-vulndbopenSUSETrivy: Path traversal via a crafted vulnerability database or other downloaded artifacts7.0 Highgovulncheck-vulndbopenSUSEAuthenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation7.2 Highgovulncheck-vulndbopenSUSESiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content9.9 Criticalgovulncheck-vulndbopenSUSESiYuan: Stored XSS to RCE via attribute-view cell rendering in genAVValueHTML()9.9 Criticalgovulncheck-vulndbopenSUSESiYuan: Stored XSS in Bazaar marketplace via package README event handlers7.1 Highgovulncheck-vulndbopenSUSESiYuan: Unauthenticated Admin API Access via Blanket chrome-extension:// Origin Allowlist9.2 Criticalgovulncheck-vulndbopenSUSESiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon5.9 Mediumgovulncheck-vulndbopenSUSESiYuan: Stored XSS to RCE via CSS-snippet <style> breakout in renderSnippet()9.9 Critical- Show moreLoading…