govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEZITADEL: Auto-linking by email: IdP-side email verification is not checked4.8 Mediumgovulncheck-vulndbopenSUSEZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider4.2 Mediumgovulncheck-vulndbopenSUSEExcelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)7.5 Highgovulncheck-vulndbopenSUSEExcelize: Negative shared-string index causes panic in GetCellValue and GetRows6.9 Mediumgovulncheck-vulndbopenSUSEExcelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation8.7 Highgovulncheck-vulndbopenSUSELima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket8.2 Highgovulncheck-vulndbopenSUSEGoBGP confederation validation panics on empty AS_PATH attribute5.9 Mediumgovulncheck-vulndbopenSUSEGoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries5.9 Mediumgovulncheck-vulndbopenSUSEsigstore-go: Multi-log threshold bypass via single compromised log5.9 Mediumgovulncheck-vulndbopenSUSEOpenRun: Redirect URL validation bypass using //host paths leads to Open Redirect5.1 Mediumgovulncheck-vulndbopenSUSESiYuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db7.7 Highgovulncheck-vulndbopenSUSESiYuan: SQL Query in Block Search Exposes Hidden Published Document Content7.5 Highgovulncheck-vulndbopenSUSEnebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate6.9 Mediumgovulncheck-vulndbopenSUSENote Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)8.6 Highgovulncheck-vulndbopenSUSENote Mark: Unauthenticated disclosure of soft-deleted note metadata via deleted=true on public books in note-mark5.3 Mediumgovulncheck-vulndbopenSUSErclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories8.8 Highgovulncheck-vulndbopenSUSErclone archive extract allows S3 destination prefix escape via crafted archive paths5.0 Mediumgovulncheck-vulndbopenSUSErclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote7.5 Highgovulncheck-vulndbopenSUSEJoro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE9.6 Criticalgovulncheck-vulndbopenSUSENuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE8.0 Highgovulncheck-vulndbopenSUSESkipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding: chunked / HTTP/2 requests7.8 Highgovulncheck-vulndbopenSUSEPortainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances7.1 Highgovulncheck-vulndbopenSUSEFile Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope6.3 Mediumgovulncheck-vulndbopenSUSESeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets4.3 Mediumgovulncheck-vulndbopenSUSESeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read7.7 Highgovulncheck-vulndbopenSUSEDgraph Alpha group stores can be replaced via unauthenticated external snapshot import9.1 Criticalgovulncheck-vulndbopenSUSEoasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)6.0 Mediumgovulncheck-vulndbopenSUSEKEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping5.9 Mediumgovulncheck-vulndbopenSUSEGoploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise7.7 Highgovulncheck-vulndbopenSUSEGoploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers9.6 Criticalgovulncheck-vulndbopenSUSEKite has an authenticated cluster RBAC bypass in /api/v1/overview4.3 Mediumgovulncheck-vulndbopenSUSEInvoking Encrypted Client Hello privacy leak in crypto/tls5.3 Mediumgovulncheck-vulndbopenSUSERoot escape via symlink plus trailing slash in os7.8 Highgovulncheck-vulndbopenSUSENew API CSRF in email and WeChat account binding endpoints5.3 Mediumgovulncheck-vulndbopenSUSENew API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs7.7 Highgovulncheck-vulndbopenSUSECoder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing5.8 Mediumgovulncheck-vulndbopenSUSECoder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component5.4 Mediumgovulncheck-vulndbopenSUSECoder's AI Bridge Proxy skips TLS certificate verification in default configuration7.4 Highgovulncheck-vulndbopenSUSESuspended Coder users retain access to AI Bridge LLM proxy endpoints5.4 Mediumgovulncheck-vulndbopenSUSECoder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints6.5 Mediumgovulncheck-vulndbopenSUSECoder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers5.4 Mediumgovulncheck-vulndbopenSUSECoder's sub-agent app registration bypasses template port-sharing policy enforcement5.4 Mediumgovulncheck-vulndbopenSUSECoder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps7.7 Highgovulncheck-vulndbopenSUSECoder: Zip upload decompression lacks aggregate size limit, enabling denial of service6.5 Mediumgovulncheck-vulndbopenSUSECoder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access5.8 Mediumgovulncheck-vulndbopenSUSECoder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator8.2 Highgovulncheck-vulndbopenSUSECoder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID8.7 Highgovulncheck-vulndbopenSUSECoder's unbounded memory allocation in provisioner file upload allows authenticated denial of service4.9 Mediumgovulncheck-vulndbopenSUSECoder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`8.3 Highgovulncheck-vulndbopenSUSECoder: User-admin role can reset owner account password7.2 High- Show moreLoading…