Most recent entries from all

certfr-2026-avi-1249 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer…

certfr-2026-avi-1249

Withdrawn: CLEANSTART-2026-AJ39907 — gRPC-Go is the Go language implementation of gRPC

Withdrawn by the publisher.

Affected: CleanStart: step

Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details.

EUVD-2026-370194

fkie_cve-2026-33815

Memory-safety vulnerability in github.com/jackc/pgx/v5.

GHSA-xgrm-4fwx-7qm8 — pgx contains memory-safety vulnerability

Affected: Go: github.com/jackc/pgx/v5

[pgx](github.com/jackc/pgx/v5) is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability.

openSUSE-SU-2026:11198-1 — cosign-3.1.1-1.1 on GA media

cosign-3.1.1-1.1 on GA media

RHSA-2026:11070 — Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update

immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code

SUSE-SU-2026:22613-1 — Security update for cosign

Security update for cosign

UBUNTU-CVE-2026-33815

Affected: Ubuntu:26.04:LTS: golang-github-jackc-pgx-v5

Memory-safety vulnerability in github.com/jackc/pgx/v5.