https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T14:38:48.430610+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-aa61617 Withdrawn: CLEANSTART-2026-AA61617 — Security fixes in grafana-alloy-fips 1.14.2-r1 2026-10-31T14:38:48.454514+00:00

Withdrawn by the publisher.

Affected: CleanStart: grafana-alloy-fips

Package grafana-alloy-fips version 1.14.2-r1 fixes 3 vulnerabilities: CVE-2026-21726, ghsa-497x-rrr9-68jp, ghsa-3xc5-wrhm-f963

 https://db.gcve.eu/vuln/cve-2026-41506 CVE-2026-41506 — go-git Credential leak via cross-host redirect in smart HTTP transport 2026-10-31T14:38:48.454585+00:00

Affected: go-git

go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patched in versions 5.18.0 and 6.0.0-alpha.2.