govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEBranch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag8.1 Highgovulncheck-vulndbopenSUSEGitea private repository metadata disclosure after access revocation4.3 Mediumgovulncheck-vulndbopenSUSEWebhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `DeleteCollaboration`)6.8 Mediumgovulncheck-vulndbopenSUSERepository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration8.5 Highgovulncheck-vulndbopenSUSEFile Browser: Share API exposes the password hash and bypass token2.7 Lowgovulncheck-vulndbopenSUSEFileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files7.7 Highgovulncheck-vulndbopenSUSESkipper routesrv-no-auth: All routesrv API Endpoints Lack Authentication5.7 Mediumgovulncheck-vulndbopenSUSESkipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS4.3 Mediumgovulncheck-vulndbopenSUSEkuma-dp connects to control plane without verifying TLS certificate when no CA is configured5.8 Mediumgovulncheck-vulndbopenSUSENuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container4.9 Mediumgovulncheck-vulndbopenSUSENuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE8.0 Highgovulncheck-vulndbopenSUSEEnvoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode7.4 Highgovulncheck-vulndbopenSUSEEnvoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure9.1 Criticalgovulncheck-vulndbopenSUSEEnvoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock5.3 Mediumgovulncheck-vulndbopenSUSEEnvoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header6.5 Mediumgovulncheck-vulndbopenSUSEEnvoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization6.5 Mediumgovulncheck-vulndbopenSUSEEnvoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit6.5 Mediumgovulncheck-vulndbopenSUSEEnvoy Gateway custom backendRef cross-namespace ReferenceGrant bypass6.4 Mediumgovulncheck-vulndbopenSUSEKuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured5.5 Mediumgovulncheck-vulndbopenSUSEArgo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing8.9 Highgovulncheck-vulndbopenSUSEToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)4.7 Mediumgovulncheck-vulndbopenSUSEdd-trace-go: Improper parsing of W3C baggage headers may lead to DoS7.5 Highgovulncheck-vulndbopenSUSECross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters4.3 Mediumgovulncheck-vulndbopenSUSEsafeurl: Missing IPv6 CIDR Ranges in Blocklist6.3 Mediumgovulncheck-vulndbopenSUSEToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway2.9 Lowgovulncheck-vulndbopenSUSECilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match5.4 Mediumgovulncheck-vulndbopenSUSEFile Browser: Colliding username normalization gives two users the same home directory8.1 Highgovulncheck-vulndbopenSUSEFile Browser: Archive builder turns backslash filenames into path traversal (zip-slip)6.8 Mediumgovulncheck-vulndbopenSUSECloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim7.6 Highgovulncheck-vulndbopenSUSECloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) — scoped DAV credential escapes its configured account root7.1 Highgovulncheck-vulndbopenSUSECloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses6.5 Mediumgovulncheck-vulndbopenSUSEWoodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend9.0 Criticalgovulncheck-vulndbopenSUSEnebula-mesh: Certificate revocation is never enforced at the mesh8.1 Highgovulncheck-vulndbopenSUSEnebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens5.4 Mediumgovulncheck-vulndbopenSUSEnebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting5.3 Mediumgovulncheck-vulndbopenSUSEAnyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode7.5 Highgovulncheck-vulndbopenSUSEnebula-mesh: Operator session tokens stored in plaintext in the database7.1 Highgovulncheck-vulndbopenSUSEnebula-mesh: CA private key not zeroized on web mobile-bundle error paths7.1 Highgovulncheck-vulndbopenSUSEAnyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode8.6 Highgovulncheck-vulndbopenSUSEyutu: Arbitrary File Write via MCP `caption-download` Tool7.7 Highgovulncheck-vulndbopenSUSEAnyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode9.1 Criticalgovulncheck-vulndbopenSUSEMKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion7.5 Highgovulncheck-vulndbopenSUSEHoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions6.5 Mediumgovulncheck-vulndbopenSUSEHoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode7.5 Highgovulncheck-vulndbopenSUSEInfinite loop on invalid input in golang.org/x/text7.5 Highgovulncheck-vulndbopenSUSEParsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage7.5 Highgovulncheck-vulndbopenSUSEOpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection8.8 Highgovulncheck-vulndbopenSUSEmelange: Incomplete package integrity verification allows data section substitution8.3 Highgovulncheck-vulndbopenSUSEAuthorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL9.3 Criticalgovulncheck-vulndbopenSUSEZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange8.1 High- Show moreLoading…