agent-bom

Supported backends vary by capability. Capability matrix...

cyclonedx-cli

root@kitploit: / / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add...

bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 元命令过滤器命令执行 摘要 pgAdmin 在修复 Issue 9320 时引入的 PLAIN 恢复元命令过滤器，在 SQL 文件以 UTF-8 字节顺序标记 EF BB BF 或其他特殊序列开头时无法检测到元命令。该实现的过滤器使用函数 hasmetacommands，该函数通过正则表达式扫描原始字节。该正则表达式未将这些字节视为可忽略，因此诸如 ! 的元命令仍未被检测到。当 pgAdmin 使用 --file 调用 psql 时，psql 会去除这些字节并执行命令。这可能导致在恢复操作过程中执行远程命令。 此绕过影响在提交...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE-Scanner Ein umfassender Schwachstellenscanner für CVE-2025-13780 , eine Remote-Code-Ausführungs-Schwachstelle RCE in pgAdmin 4 Versionen ≤ 8.14. 🔍 Details zur Schwachstelle Die Schwachstelle befindet sich in der Wiederherstellungs -Funktion von pgAdmin 4. Die...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, gitsign, src-fingerprint, go-licenses, nuclei, bom, goreleaser, gitness, scorecard...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: up, apko, ko, melange, ctop, bom, helm...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: up, apko, ko, melange, ctop, bom, helm...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: up, apko, ko, melange, ctop, bom, helm...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: aactl, argocd-image-updater-fips, kubernetes-dashboard, bom, kpt, argocd-image-updater...

GO-2024-2456 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, go-licenses, src-fingerprint, gitness, goreleaser, nuclei, scorecard, bom, gitsign...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, flux-kustomize-controller, src-fingerprint, goreleaser, flux, syft, grype, k9s, tfsec, kubevela, flux-image-automation-controller, pulumi, wolfictl, zot, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy, argo-workflows,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, flux-kustomize-controller, src-fingerprint, goreleaser, flux, syft, grype, k9s, tfsec, kubevela, flux-image-automation-controller, pulumi, wolfictl, zot, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy, argo-workflows,...

GO-2023-1699 vulnerabilities

Vulnerabilities for packages: ctop, helm, ko, up, apko, melange, bom...

GO-2023-1700 vulnerabilities

Vulnerabilities for packages: ctop, helm, ko, up, apko, melange, bom...

GO-2024-2466 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, flux-kustomize-controller, src-fingerprint, goreleaser, kubevela, pulumi, gitness, pulumi-language-java, pulumi-language-yaml, scorecard, gitsign, kots, nuclei, apko, gomplate, go-licenses, pulumi-language-dotnet, zot, bom...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, src-fingerprint, steampipe, flux, syft, witness, grype, k9s, tfsec, nfpm, kubevela, flux-image-automation-controller, pulumi, rancher-fleet, wolfictl, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy, argo-workflows, gitea,...

GO-2023-1701 vulnerabilities

Vulnerabilities for packages: ctop, helm, ko, up, apko, melange, bom...

GO-2023-1772 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, argocd-image-updater, kpt, aactl, bom...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, dockerize, cosign, falco-no-driver, kapp, cluster-api-ipam-provider-in-cluster, nginx-prometheus-exporter, src-fingerprint, headlamp, newrelic-infra-operator, sealed-secrets, minio, wgcf, govulncheck, aws-flb-kinesis, tofu-controller, sop...