CO
Product
Compliance Operator 1
11
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 1Low 0
Watch
Add Compliance Operator 1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33186 | 9.1 | Mar 20 | gRPC-Go has an authorization bypass via missing leading slash in :path Affected: All versions, or not specified |
| CVE-2026-33810 | 8.2 | Apr 8 | Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509 Affected: All versions, or not specified |
| CVE-2025-7425 | 7.8 | Jul 10 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected: All versions, or not specified |
| CVE-2025-6020 | 7.8 | Jun 17 | Linux-pam: linux-pam directory traversal Affected: All versions, or not specified |
| CVE-2025-5914 | 7.8 | Jun 9 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c Affected: All versions, or not specified |
| CVE-2026-33811 | 7.5 | May 7 | Crash when handling long CNAME response in net Affected: All versions, or not specified |
| CVE-2026-32280 | 7.5 | Apr 8 | Unexpected work during chain building in crypto/x509 Affected: All versions, or not specified |
| CVE-2026-32283 | 7.5 | Apr 8 | Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls Affected: All versions, or not specified |
| CVE-2026-25679 | 7.5 | Mar 6 | Incorrect parsing of IPv6 host literals in net/url Affected: All versions, or not specified |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: All versions, or not specified |
| CVE-2026-27145 | 6.5 | Jun 2 | Inefficient candidate hostname parsing in crypto/x509 Affected: All versions, or not specified |
Showing 11