CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: py3-captum, kibana, commercial-gitlab-rails-ee-fips, haraka, saf, actions-runner, commercial-gitlab-rails-ee, renovate, prism, vitess, code-server, npm, pelias-api, gemini-cli, node-gyp...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: py3-captum, kibana, commercial-gitlab-rails-ee-fips, haraka, saf, actions-runner, commercial-gitlab-rails-ee, renovate, prism, vitess, code-server, npm, pelias-api, gemini-cli, node-gyp...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: py3-captum, kibana, commercial-gitlab-rails-ee-fips, haraka, saf, actions-runner, commercial-gitlab-rails-ee, renovate, prism, vitess, code-server, npm, pelias-api, gemini-cli, node-gyp...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: py3-captum, kibana, commercial-gitlab-rails-ee-fips, haraka, saf, actions-runner, commercial-gitlab-rails-ee, renovate, prism, vitess, code-server, npm, pelias-api, gemini-cli, node-gyp...

GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...

CVE-2026-41907 vulnerabilities

Vulnerabilities for packages: py3-captum, azurite, kibana, commercial-gitlab-rails-ee-fips, py3-jupyterlab, kubeflow-centraldashboard, wazuh-dashboard-fips, nemo, npm, tensorflow-cpu-jupyter, langfuse, arangodb, librechat, gitlab-rails-ce-fips, renovate, kubeflow-pipelines, prism,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: karpenter, pluto, rabbitmq-messaging-topology-operator, grafana-operator, apko, flux-source-controller, envoy-ratelimit, kubewatch, mariadb-operator, victoriametrics-cluster, external-secrets-operator, stakater-reloader, actions-runner-controller,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: argo-cd, postgres-operator, sbomqs, flux-source-controller, opentelemetry-operator, regclient, mountpoint-s3-csi-driver, frp, dkron, gostatsd, memcached-exporter, nri-elasticsearch, seaweedfs, nfpm, hugo-extended, amazon-k8s-cni, terraform-provider-kubernetes, k3d,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: osv-scanner, livekit-cli, kyverno-notation-aws, hydra, cloudbeat, omni, terraform-provider-pagerduty, flux-fips, kubescape-server-fips, crossplane-provider-aws-cloudwatchlogs, terraform, grype, src-fingerprint, grafana-alloy, gitlab-rails-ce-fips,...

CVE-2026-25547 vulnerabilities

Vulnerabilities for packages: drupal, pulumi, actions-runner, renovate, npm, librechat, node-gyp, sqlpad, lerna...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: src, postgres-operator, opentelemetry-operator, regclient, frp, gostatsd, temporal-server, nri-elasticsearch, seaweedfs, nfpm, hugo-extended, k3d, pgtimetable, percona-server-mongodb-operator, oras, github-mcp-server, tekton-chains, go-licenses, chisel, spqr,...

EUVD-2025-27053

Malicious code in bioql PyPI...

EUVD-2022-6988

Malicious code in bioql PyPI...

EUVD-2022-49076

Malicious code in bioql PyPI...

CVE-2025-58371: Improper Neutralization of Special Elements used in an OS Command

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull request metadata in a privileged context, allowing an attacker to craft malicious input and achieve Remote Code Execution RCE on the Actions runner...

Malicious code in actions-runner-admin (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...

MAL-2025-46892 Malicious code in actions-runner-admin (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...

PT-2025-30157

CVE-2025-50716 Github link: https://t.co/IIX0i7zNh7...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, frp, gostatsd, temporal-server, memcached-exporter, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...

CVE-2025-22872 vulnerabilities

Vulnerabilities for packages: trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, frp, gostatsd, temporal-server, memcached-exporter, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...