246 matches found
agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Self-host · Deployment models · Quick start · Product tour · Docs agent-bom finds the AI agents, MCP servers, packages and credentials in a repository, w...
cyclonedx-cli
/ / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add Add...
pgadmin4-9.10-CVE-2025-13780
pgadmin4 9.11 Ejecución de comandos mediante el filtro de meta-comandos Resumen El filtro de meta-comandos de restauración PLAIN introducido en pgAdmin como parte de la corrección del Issue 9320 no detecta meta-comandos cuando un archivo SQL comienza con una Marca de Orden de Bytes UTF-8 EF BB BF...
CVE-2026-102272
A flaw was found in pyjwt. When verifying cryptographic keys, the raw JSON Web Key JWK parser fails to normalize Unicode byte-order marks BOM. In mixed-algorithm verification environments, an attacker who knows the public key can supply a key prefixed with a byte-order mark, causing the system to...
DEBIAN-CVE-2026-102272
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...
CVE-2026-102272
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...
CVE-2026-102272 PyJWT BOM Bypass
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...
CVE-2026-102272
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...
CVE-2026-102272 PyJWT BOM Bypass
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...
EUVD-2026-88540
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.preparekey in jwt/algorithms.py is affected because raw-JWK detector does not normalize accepted Unicode byte-order marks before checking for JSON. This occurs when a public JWK is prefixed with ...
CVE-2026-102272
The PyJWT library (versions 2.13.0 up to 2.14.0) contains a vulnerability in the HMACAlgorithm.prepare_key function within jwt/algorithms.py. The root cause is that the raw-JWK detector fails to normalize accepted Unicode byte-order marks (BOM) before performing JSON checks. When a public JWK is ...
owasp-aibom
This repository does not have a README...
CVE-2025-13780
CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...
bom-view
BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...
agent-bom v0.104.0
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Self-host · Deployment models · Quick start · Product tour · Docs agent-bom finds the AI agents, MCP servers, packages and credentials in a repository, w...
GO-2024-2456 vulnerabilities
Vulnerabilities for packages: scorecard, go-licenses, goreleaser, pulumi-kubernetes-operator, gitsign, nuclei, src-fingerprint, bom, gitness...
GO-2023-1700 vulnerabilities
Vulnerabilities for packages: helm, up, apko, melange, ctop, bom, ko...
GO-2023-1701 vulnerabilities
Vulnerabilities for packages: helm, up, apko, melange, ctop, bom, ko...