Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call

CVE-2026-42541

### Impact Kubewarden is a policy engine for Kubernetes. Kubewarden cluster operators can grant permissions to users to

历史摘要 · 未重新核验 · GitHub Advisory

PocketBase vulnerable to account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade

CVE-2026-44166

A pre-hijacking issue was discovered with the OAuth2 autolinking by [Alardiians](https://github.com/Alardiians). In som

历史摘要 · 未重新核验 · GitHub Advisory

Hysteria: A specially constructed quic package can crash the server OOM when the sniff is enabled

### Summary A specially constructed quic package can crash the server OOM when the sniff is enabled. ### Details When

历史摘要 · 未重新核验 · GitHub Advisory

DevGuard has an unauthenticated identity assertion via `X-Admin-Token` header

CVE-2026-42300

### Impact The `SessionMiddleware` accepts a client-supplied `X-Admin-Token` HTTP request header and uses its raw string

历史摘要 · 未重新核验 · GitHub Advisory

GoBGP has a panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)

CVE-2026-42285

### Summary Remote Denial of Service (DoS) via Nil Pointer Dereference in BGP Update Processing An unauthenticated remot

历史摘要 · 未重新核验 · GitHub Advisory

Nginx-UI: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback

CVE-2026-42220

## Summary An authenticated user can call `GET /api/settings` and retrieve sensitive configuration values, including `no

历史摘要 · 未重新核验 · GitHub Advisory

Fiber vulnerable to XSS in AutoFormat Content Negotiation

CVE-2026-42554

## Summary **Description** A Cross-Site Scripting (CWE-79) vulnerability in Go Fiber allows a remote attacker to injec

历史摘要 · 未重新核验 · GitHub Advisory

MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint

CVE-2026-42600

### Impact _What kind of vulnerability is it? Who is impacted?_ A path traversal vulnerability in MinIO's `ReadMultipl

历史摘要 · 未重新核验 · GitHub Advisory

OpenBao's Namespace Deletion May Not Delete Data Properly

CVE-2026-42186

### Impact When OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all data before

历史摘要 · 未重新核验 · GitHub Advisory

Prometheus: Remote read endpoint allows denial of service via crafted snappy payload

CVE-2026-42154

### Impact The remote read endpoint (`/api/v1/read`) does not validate the declared decoded length in a snappy-compress

历史摘要 · 未重新核验 · GitHub Advisory

Prometheus Azure AD remote write OAuth client secret exposed via config API

CVE-2026-42151

### Impact Users who use Azure AD remote write with OAuth authentication are impacted. The `client_secret` field in th

历史摘要 · 未重新核验 · GitHub Advisory

From TinyGo to gc Compiler: Extending Zorya's Concolic Framework to Real-World Go Binaries

本文介绍了 Zorya 符号执行框架的扩展，使其能够处理由 Go 标准 gc 编译器生成的多线程二进制文件。Zorya 框架最初仅支持单线程 TinyGo 二进制，通过将二进制提升到 Ghidra 的 P-Code 中间表示，并利用 Z3

历史摘要 · 未重新核验 · arXiv cs.CR

apko doesn't verify downloaded apk packages against APKINDEX checksum (package substitution possible)

CVE-2026-42575

apko verifies the signature on `APKINDEX.tar.gz` but never compares individually downloaded `.apk` packages against the

历史摘要 · 未重新核验 · GitHub Advisory

apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root

CVE-2026-42574

### Impact A crafted `.apk` could install a `TypeSymlink` tar entry whose target pointed outside the build root, and a

历史摘要 · 未重新核验 · GitHub Advisory

apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery

CVE-2026-42576

`DiscoverKeys` in `pkg/apk/apk/implementation.go` unconditionally type-asserts JWKS keys as `*rsa.PublicKey` without che

历史摘要 · 未重新核验 · GitHub Advisory

Pelican Web UI Affected by a Privilege Escalation Attack

CVE-2026-42571

## Background On April 2nd, 2026, a Claude coding agent alerted Pelican PI Brian Bockelman to a privilege escalation vu

历史摘要 · 未重新核验 · GitHub Advisory

Distribution's tag deletion bypasses `storage.delete.enabled` configuration

CVE-2026-41888

### Summary Tag deletion via the `DELETE /v2//manifests/` endpoint bypasses the `storage.delete.enabled: false` configu

历史摘要 · 未重新核验 · GitHub Advisory

Argo vulnerable to exposure of artifact repository credentials

CVE-2026-42295

### Summary The workflow executor logs all artifact repository credentials (S3 access keys, secret keys, GCS service acc

历史摘要 · 未重新核验 · GitHub Advisory

Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure

CVE-2026-42296

The fix for CVE-2026-31892 (commit 534f4ff) blocks `podSpecPatch` when `templateReferencing: Strict` is active, but does

历史摘要 · 未重新核验 · GitHub Advisory

Argo Vulnerable to Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

CVE-2026-42294

**Severity:** Medium **Component:** Webhook Interceptor (`server/auth/webhook`) **Vulnerability Type:** Denial of Servic

历史摘要 · 未重新核验 · GitHub Advisory