linuxfoundation
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 585 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 29, 2011 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
Spinnaker: Improper yaml processing on kustomize bake operations
NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled
NATS Server: `no_auth_user` pre-CONNECT fast path bypasses user connection restrictions
NATS Server: Remote crash via integer overflow in Connz pagination
NATS Server: MQTT partial CONNECT packets can exhaust pre-auth memory
NATS Server: MQTT retained and QoS replay bypass subscribe deny filters
NATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)
NATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission check
NATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injection
Monitor linuxfoundation in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.