A high-severity security vulnerability (CVE-2026-90560) affects the kafka package due to an issue in zstd-jni versions 1. Versions of kafka prior to 4.0.2-r6 are impacted. The vulnerability has a CVSS score of 8.2, indicating a network exploitable flaw with low attack complexity, no privileges or user interaction required, resulting in low confidentiality impact and high availability impact. A fix is available in kafka version 4.0.2-r6.
CVE-2026-114437 is a medium severity vulnerability in the Golang Chi web framework used by Gitea. The ClientIPFromXFF middleware improperly handles the X-Forwarded-For HTTP header by skipping entries from configured trusted CIDRs without verifying the direct TCP peer. This flaw could allow an attacker to spoof the client IP address under certain conditions. The issue affects multiple Gitea versions prior to 1.26.4-r5, 1.27.3-r2, and 1.19.2-r1, which have been fixed in those releases.
CVE-2026-82458 is a high-severity vulnerability in the minio package involving memory allocation with an excessive size value, leading to allocation of resources without limits or throttling. This flaw affects versions prior to 0.20250907.161309-r9. A fix is available in version 0.20250907.161309-r9. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a significant impact if exploited.
A security vulnerability identified as CVE-2026-41568 affects the Traefik package, specifically versions prior to 3.4.5-r7. The vulnerability has a CVSS score of 6.1, indicating a medium severity level. It involves a local attack vector with high attack complexity and requires low privileges and user interaction. The impact includes no confidentiality loss, low integrity impact, but high availability impact. A fix is available in version 3.4.5-r7.
A high-severity security vulnerability affects Traefik versions prior to 3.4.5-r7. This vulnerability has a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability. The issue is resolved in version 3.4.5-r7.
A critical security vulnerability exists in the Traefik package affecting all versions before 3.4.5-r7. The flaw allows an unauthenticated attacker to remotely exploit the system with high impact on confidentiality and integrity but no impact on availability. A fix is available in version 3.4.5-r7.
A security vulnerability identified as CVE-2026-65600 affects the Traefik package in versions prior to 3.4.5-r7. The vulnerability has a medium severity with a CVSS score of 5.3 and impacts confidentiality without affecting integrity or availability. A patch is available in version 3.4.5-r7.
A high-severity security vulnerability (CVE-2026-42306) affects the Traefik package, related to the Moby open source container framework. The vulnerability impacts versions of Traefik prior to 3.4.5-r7 and has been fixed in version 3.4.5-r7. The CVSS score is 7.2, indicating a significant risk with high impact on integrity and availability, requiring low privileges and user interaction to exploit.
CVE-2026-41263 is a low-severity security vulnerability affecting Traefik, an HTTP reverse proxy and load balancer. The vulnerability impacts versions prior to 3.4.5-r7. A fix is available in version 3.4.5-r7. The vulnerability has a CVSS score of 3.7, indicating limited impact, specifically a low confidentiality impact with no integrity or availability impact. No known exploits are reported in the wild.
CVE-2026-41174 is a medium severity security vulnerability in Traefik, an HTTP reverse proxy and load balancer. The flaw affects versions prior to 3.4.5-r7 and has been fixed in version 3.4.5-r7. The vulnerability has a CVSS 3.1 base score of 6.4, indicating a network attack vector with low complexity, requiring low privileges and no user interaction, and impacts confidentiality and integrity with no availability impact.
CVE-2026-40912 is a high-severity security vulnerability affecting Traefik, an HTTP reverse proxy and load balancer. The vulnerability impacts versions prior to 3.4.5-r7. It has a CVSS 3.1 score of 8.2, indicating a network exploitable flaw with high confidentiality impact and low integrity impact, without requiring privileges or user interaction. A patch is available in version 3.4.5-r7.
CVE-2026-39858 is a critical security vulnerability in Traefik, an HTTP reverse proxy and load balancer. The flaw affects all versions prior to 3.4.5-r7. It has a CVSS score of 10.0, indicating a network exploitable vulnerability with no required privileges or user interaction, causing complete confidentiality and integrity compromise but no availability impact. A patch is available in version 3.4.5-r7.
CVE-2026-35051 is a critical security vulnerability in Traefik, an HTTP reverse proxy and load balancer. The flaw affects versions prior to 3.4.5-r7 and has a CVSS score of 10.0, indicating a network exploitable vulnerability with no required privileges or user interaction. It impacts confidentiality and integrity with a scope change but does not affect availability. A fix is available in version 3.4.5-r7.
CVE-2026-29054 is a high-severity security vulnerability in Traefik, an HTTP reverse proxy and load balancer. The flaw affects versions prior to 3.4.5-r7 and allows an attacker to cause a high impact on integrity without requiring privileges or user interaction. A patch is available in version 3.4.5-r7.
CVE-2026-26999 is a high-severity security vulnerability affecting Traefik, an HTTP reverse proxy and load balancer. The vulnerability impacts versions prior to 3.4.5-r7 and can cause denial of service (availability impact) without affecting confidentiality or integrity. A patch is available in version 3.4.5-r7.
CVE-2026-26998 is a medium severity security vulnerability in Traefik, an HTTP reverse proxy and load balancer. The flaw affects versions prior to 3.4.5-r7 and impacts availability without compromising confidentiality or integrity. A patch is available in version 3.4.5-r7.
CVE-2026-25949 is a high-severity security vulnerability affecting Traefik, an HTTP reverse proxy and load balancer. The vulnerability impacts versions prior to 3.4.5-r7 and can cause a denial of service (availability impact) without compromising confidentiality or integrity. A patch is available in version 3.4.5-r7.
A high-severity security vulnerability (CVE-2026-22045) affects Traefik, an HTTP reverse proxy and load balancer. The flaw impacts versions prior to 3.4.5-r7 and can cause availability disruption without compromising confidentiality or integrity. A patch is available in version 3.4.5-r7.
CVE-2025-66490 is a medium severity security vulnerability affecting Traefik, an HTTP reverse proxy and load balancer. The vulnerability impacts versions prior to 3.4.5-r7. It allows an attacker to cause limited confidentiality and integrity loss without requiring privileges or user interaction. A patch is available in version 3.4.5-r7.
A security vulnerability in the Kubernetes package allows the Nickname profile to panic due to an out-of-bounds slice error when processing crafted input into a short destination buffer. This can cause denial of service by crashing the affected component.