govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSETraefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef4.8 Mediumgovulncheck-vulndbopenSUSETraefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool7.0 Highgovulncheck-vulndbopenSUSErclone: Local Encoding Path Traversal6.9 Mediumgovulncheck-vulndbopenSUSErclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution8.0 Highgovulncheck-vulndbopenSUSErclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlines6.4 Mediumgovulncheck-vulndbopenSUSErclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory5.9 Mediumgovulncheck-vulndbopenSUSErclone: Incomplete path validation allows backend root escape in serve restic8.6 Highgovulncheck-vulndbopenSUSEBuildKit: Possible runtime DoS via unbounded group parsing2.3 Lowgovulncheck-vulndbopenSUSESiYuan before v3.7.3 Path Traversal via unvalidated avID8.3 Highgovulncheck-vulndbopenSUSESiYuan before v3.7.3 SQL Injection via searchEmbedBlock9.9 Criticalgovulncheck-vulndbopenSUSESiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent9.9 Criticalgovulncheck-vulndbopenSUSESiYuan before v3.7.3 Information Disclosure via getHeading*Transaction9.2 Criticalgovulncheck-vulndbopenSUSESiYuan before v3.7.3 Content Disclosure via getBacklinkDoc9.2 Criticalgovulncheck-vulndbopenSUSESiYuan before v3.7.3 Metadata Disclosure via getBlockInfo6.9 Mediumgovulncheck-vulndbopenSUSESiYuan before v3.7.3 Authentication Bypass via Content Endpoints9.2 Criticalgovulncheck-vulndbopenSUSETraefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass7.8 Highgovulncheck-vulndbopenSUSEPion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute5.3 Mediumgovulncheck-vulndbopenSUSEsigstore-go fails to check signature timestamps against a signing key's validity period3.1 Lowgovulncheck-vulndbopenSUSEfree5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure6.9 Mediumgovulncheck-vulndbopenSUSEvault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API9.6 Criticalgovulncheck-vulndbopenSUSEWings: Maliciously crafted packet during SFTP connection handshake causes denial of service7.5 Highgovulncheck-vulndbopenSUSEWings exposes node configuration secrets through egg configuration-file templating9.9 Criticalgovulncheck-vulndbopenSUSEWings: Maliciously or erroneously created parsed config files can cause wings process to OOM5.5 Mediumgovulncheck-vulndbopenSUSECapsule: Incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)6.6 Mediumgovulncheck-vulndbopenSUSECapsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests6.8 Mediumgovulncheck-vulndbopenSUSEOliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output4.3 Mediumgovulncheck-vulndbopenSUSEOliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check6.6 Mediumgovulncheck-vulndbopenSUSEOliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)7.5 Highgovulncheck-vulndbopenSUSELogging operator has Fluentd configuration injection that allows remote code execution9.9 Criticalgovulncheck-vulndbopenSUSEZITADEL Users Can Self-Verify Email/Phone via API8.2 Highgovulncheck-vulndbopenSUSEprebid-server's request forgery vulnerability allows for possible host environment data extraction10.0 Criticalgovulncheck-vulndbopenSUSEopenhole-server vulnerable to path traversal via URL-decoded request path8.6 Highgovulncheck-vulndbopenSUSEtd has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode7.5 Highgovulncheck-vulndbopenSUSEgoshs has ACL Bypass & Path Traversal5.3 Mediumgovulncheck-vulndbopenSUSEgoshs has a Path Traversal issue6.5 Mediumgovulncheck-vulndbopenSUSEgoshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite9.1 Criticalgovulncheck-vulndbopenSUSEgoshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of CVE-2026-40189)7.5 Highgovulncheck-vulndbopenSUSEgoshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)9.1 Criticalgovulncheck-vulndbopenSUSECosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server6.1 Mediumgovulncheck-vulndbopenSUSECosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens5.3 Mediumgovulncheck-vulndbopenSUSEGoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS6.9 Mediumgovulncheck-vulndbopenSUSEGoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)6.9 Mediumgovulncheck-vulndbopenSUSEPterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions8.1 Highgovulncheck-vulndbopenSUSEGitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler7.5 Highgovulncheck-vulndbopenSUSEetcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline8.7 Highgovulncheck-vulndbopenSUSEkin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema5.3 Mediumgovulncheck-vulndbopenSUSEetcd: Watch API authorization bypass via open-ended range requests7.1 Highgovulncheck-vulndbopenSUSEOh My Posh: Arbitrary command execution via template injection in the path segment7.8 Highgovulncheck-vulndbopenSUSEOh My Posh: Terminal escape sequence injection via unsanitized prompt segment data6.1 Mediumgovulncheck-vulndbopenSUSEOpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal7.6 High- Show moreLoading…