govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEamqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload8.9 Highgovulncheck-vulndbopenSUSEGitea: Remote Code Execution via diffpatch Git Hook Installation9.8 Criticalgovulncheck-vulndbopenSUSEKyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system9.6 Criticalgovulncheck-vulndbopenSUSEORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption6.5 Mediumgovulncheck-vulndbopenSUSEgenieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport8.8 Highgovulncheck-vulndbopenSUSEmcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist8.6 Highgovulncheck-vulndbopenSUSEmcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable8.4 Highgovulncheck-vulndbopenSUSEmcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias8.4 Highgovulncheck-vulndbopenSUSEkin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding8.7 Highgovulncheck-vulndbopenSUSEkin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS7.5 Highgovulncheck-vulndbopenSUSEAtlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation8.1 Highgovulncheck-vulndbopenSUSEInfracost: Arbitrary file read via config-template readFile symlink traversal5.9 Mediumgovulncheck-vulndbopenSUSEInfracost: Terraform Cloud and registry token disclosure via unvalidated hostname5.9 Mediumgovulncheck-vulndbopenSUSEIncus has a project restriction bypass in instance copy across projects7.7 Highgovulncheck-vulndbopenSUSEIncus has a project restriction bypass for custom volume copy across projects7.7 Highgovulncheck-vulndbopenSUSEMailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)6.5 Mediumgovulncheck-vulndbopenSUSEMailpit: SMTP DATA line reader buffers over-limit input before size enforcement5.3 Mediumgovulncheck-vulndbopenSUSEMailpit: SMTP command parser buffers unbounded command lines before syntax rejection5.3 Mediumgovulncheck-vulndbopenSUSEMailpit: Thumbnail generation decodes unbounded image dimensions before scaling5.3 Mediumgovulncheck-vulndbopenSUSEFleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database7.6 Highgovulncheck-vulndbopenSUSEPipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution6.5 Mediumgovulncheck-vulndbopenSUSEPipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header8.2 Highgovulncheck-vulndbopenSUSEEmber: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI4.7 Mediumgovulncheck-vulndbopenSUSEVouch Proxy: Unbounded Multipart Cookie Allocation DoS7.5 Highgovulncheck-vulndbopenSUSEOpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access5.9 Mediumgovulncheck-vulndbopenSUSEVelero vulnerable to file path traversal when extracting from backup's tarball5.9 Mediumgovulncheck-vulndbopenSUSEVictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root6.8 Mediumgovulncheck-vulndbopenSUSEBuildKit: Custom frontend could bypass Seccomp/AppArmor5.3 Mediumgovulncheck-vulndbopenSUSEInspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS6.9 Mediumgovulncheck-vulndbopenSUSETar extraction in moby/go-archive can write outside the destination directory via link following7.1 Highgovulncheck-vulndbopenSUSEVitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data5.3 Mediumgovulncheck-vulndbopenSUSEWITHDRAWN: Multiple denial of service vulnerabilities in rsc.io/pdf and forksNo scoregovulncheck-vulndbopenSUSEWITHDRAWN: Pre-protocol error reader permits unbounded memory consumption in github.com/lib/pqNo scoregovulncheck-vulndbopenSUSEWITHDRAWN: Backend frame lengths cause pre-validation memory exhaustion in github.com/lib/pqNo scoregovulncheck-vulndbopenSUSEWITHDRAWN: Malformed RowDescription and DataRow messages cause panics in github.com/lib/pqNo scoregovulncheck-vulndbopenSUSEWITHDRAWN: Malformed backend frame length causes panic in github.com/lib/pqNo scoregovulncheck-vulndbopenSUSEWITHDRAWN: Disclosure of wrong .pgpass credential via hostaddr in github.com/lib/pqNo scoregovulncheck-vulndbopenSUSEWITHDRAWN: Unbounded iteration count causes CPU denial of service in github.com/lib/pq/scramNo scoregovulncheck-vulndbopenSUSEWITHDRAWN: GSS authentication completes without mutual proof in github.com/lib/pqNo scoregovulncheck-vulndbopenSUSETrivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write6.8 Mediumgovulncheck-vulndbopenSUSEuniget: Path Traversal in Hook Files - Directory Escape Vulnerability8.4 Highgovulncheck-vulndbopenSUSEuniget: EDITOR Command Injection in uniget CLI1.0 Lowgovulncheck-vulndbopenSUSETerragrunt: Arbitrary File Deletion via Malicious Module Manifest6.9 Mediumgovulncheck-vulndbopenSUSENew API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass6.0 Mediumgovulncheck-vulndbopenSUSENew API: Integer overflow in quota billing yields negative charges (self-crediting)9.1 Criticalgovulncheck-vulndbopenSUSENew API: Admin can reset passkeys for same-level or higher-privileged users5.1 Mediumgovulncheck-vulndbopenSUSENew API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging7.5 Highgovulncheck-vulndbopenSUSENew API: User List API Leaks Root User Access Token Leading to Privilege Escalation9.1 Criticalgovulncheck-vulndbopenSUSEFabric CA: LDAP Injection via Unescaped Username in GetUser Filter6.3 Mediumgovulncheck-vulndbopenSUSEExcessive memory allocation during VP8L decoding in golang.org/x/image7.5 High- Show moreLoading…