No access to your tenant or devices. Every item links to its source. What this means
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · CVE-2026-33634 · GO-2026-4919
Go: github.com/aquasecurity/trivy · GitHub Actions: aquasecurity/trivy-action · GitHub Actions: aquasecurity/setup-trivy
osv · BIT-nats-2026-29785 · CVE-2026-29785 · GO-2026-4829
Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server
osv · CVE-2026-32285 · GO-2026-4514
Go: github.com/buger/jsonparser
osv · CVE-2026-32761 · GO-2026-4738
Go: https://github.com/filebrowser/filebrowser
osv · CVE-2026-3520
npm: multer
osv · CVE-2026-33748 · GO-2026-4859
Go: github.com/moby/buildkit
osv · CVE-2026-73427
npm: trix · RubyGems: action_text-trix
osv · CVE-2026-24843 · GO-2026-4407
Go: chainguard.dev/melange
osv · CVE-2026-1229 · GO-2026-4550
Go: github.com/cloudflare/circl
osv · CVE-2026-24737
npm: jspdf
osv · CVE-2026-27970
npm: @angular/core · npm: @angular/core · npm: @angular/core
osv · CVE-2026-21435 · GO-2026-4488
Go: github.com/quic-go/webtransport-go
osv · BIT-nats-2026-27571 · CVE-2026-27571 · GO-2026-4533
Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server/v2 · Go: github.com/nats-io/nats-server
osv · CVE-2026-24512 · GO-2026-4426
Go: k8s.io/ingress-nginx · Go: k8s.io/ingress-nginx
osv · CVE-2026-2303 · GO-2026-5327
Go: go.mongodb.org/mongo-driver · Go: go.mongodb.org/mongo-driver/v2
osv · BIT-grafana-2025-41117 · CVE-2025-41117 · GO-2026-5332
Go: github.com/grafana/grafana · Go: github.com/grafana/grafana
osv · CVE-2026-24040
npm: jspdf
osv · CVE-2026-25934 · GO-2026-4473
Go: github.com/go-git/go-git/v5
osv · CVE-2026-25755
npm: jspdf
osv · RUSTSEC-2026-0012
crates.io: keccak
osv · BIT-envoy-gateway-2026-22771 · CVE-2026-22771 · GO-2026-4312
Go: github.com/envoyproxy/gateway · Go: github.com/envoyproxy/gateway
osv · CVE-2026-0528 · GO-2026-4360
Go: github.com/elastic/beats/v7 · Go: github.com/elastic/beats/v7 · Go: github.com/elastic/beats/v7
osv · CVE-2026-24473
npm: hono
osv · CVE-2026-27904
npm: minimatch · npm: minimatch · npm: minimatch
osv · CVE-2026-24116 · RUSTSEC-2026-0006
crates.io: wasmtime · crates.io: wasmtime · crates.io: wasmtime
osv · CVE-2026-23950
npm: tar
osv · CVE-2026-24398
npm: hono
osv · BIT-kyverno-2026-23881 · CVE-2026-23881 · GO-2026-4382
Go: github.com/kyverno/kyverno · Go: github.com/kyverno/kyverno
osv · CVE-2026-74797 · GO-2026-4352
Go: github.com/opentofu/opentofu
osv · RUSTSEC-2026-0005
crates.io: oneshot
osv · RUSTSEC-2026-0002
crates.io: lru
osv · CVE-2025-59471
npm: next · npm: next
osv · CVE-2026-23745
npm: tar
osv · CVE-2026-0621
npm: @modelcontextprotocol/sdk
osv · CVE-2026-24117 · GO-2026-4355
Go: github.com/sigstore/rekor
osv · CVE-2026-23849 · GO-2026-4344
Go: github.com/filebrowser/filebrowser · Go: github.com/filebrowser/filebrowser/v2
osv · CVE-2025-14874
npm: nodemailer · Maven: org.webjars.npm:nodemailer
osv · CVE-2026-22818
npm: hono
osv · CVE-2025-13281 · GO-2025-4240
Go: k8s.io/kubernetes · Go: k8s.io/kubernetes · Go: k8s.io/kubernetes
osv · CVE-2025-68665
npm: @langchain/core · npm: @langchain/core · npm: langchain
osv · CVE-2025-48985
npm: ai · npm: ai
osv · CVE-2025-68388 · GO-2025-4253
Go: github.com/elastic/beats · Go: github.com/elastic/beats · Go: github.com/elastic/beats
osv · CVE-2025-66506 · GO-2025-4193
Go: github.com/sigstore/fulcio
osv · CVE-2025-68156 · GO-2025-4245
Go: github.com/expr-lang/expr
osv · CVE-2025-64718
npm: js-yaml · npm: js-yaml
osv · CVE-2024-25621 · GO-2025-4100
Go: github.com/containerd/containerd · Go: github.com/containerd/containerd/v2 · Go: github.com/containerd/containerd/v2
osv · CVE-2025-12758
npm: validator
osv · CVE-2025-64433 · GO-2025-4109
Go: kubevirt.io/kubevirt · Go: kubevirt.io/kubevirt
osv · BIT-vault-2025-12044 · CVE-2025-12044 · GO-2025-4071
Go: github.com/hashicorp/vault
osv · CVE-2025-64329 · GO-2025-4108
Go: github.com/containerd/containerd · Go: github.com/containerd/containerd/v2 · Go: github.com/containerd/containerd/v2
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.