227 matches found
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: helm-push, ip-masq-agent, doppler-kubernetes-operator, git-credential-oauth, mkcert, prometheus-adapter, metrics-server, terraform, delve, distribution, hey, configmap-reload, kube-state-metrics, hydra, src-fingerprint, podinfo, pvc-autoresizer, timescaledb-tune,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, harbor, terraform,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...
CVE-2025-61724 vulnerabilities
Vulnerabilities for packages: wave, maru, seaweedfs-operator-fips, amass, blobfuse2-fips, google-guest-agent, wavefront-collector-for-kubernetes, mattmoor-chainit, boring-registry, kubernetes-csi-node-driver-registrar-fips, whereabouts-fips, tekton-pipelines-fips, kube-bench-fips, harbor,...
Improper Access Control
com.liferay.portal, release.portal.bom is vulnerable to improper access control. The vulnerability is due to the failure to restrict API access before a user changes their initial password, which allows an attacker to remotely access and modify content via the API...
EUVD-2014-6422
Malware in sbrugna...
EUVD-2006-0398
Malware in sbrugna...
EUVD-2008-4200
Malware in sbrugna...
EUVD-2022-29594
Malicious code in bioql PyPI...
Reflected Cross-Site Scripting (Reflected XSS)
com.liferay.portal, release.portal.bom is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper validation of the snippet parameter, which allows an attacker to inject and execute arbitrary JavaScript code in a victim’s browser...
Cross-Site Request Forgery (CSRF)
com.liferay.portal, release.portal.bom is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to improper validation of the endpoint parameter, which allows an attacker to perform cross-origin requests on behalf of an authenticated user...
Cross-site Request Forgery (CSRF)
Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via insufficient protection for omni-administrator users. An attacker can perform unauthorized actions on behalf of authenticated users by tricking them into submitting malicious requests. Remediation...
Spring AI - Groq AI inference
Faster information processing not only inform—it transforms how we perceive and innovate. Spring AI, a powerful framework for integrating AI capabilities into Spring applications, now offers support for Groq - a blazingly fast AI inference engine with supports for Tool/Function calling. Because...