CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: keda-fips, knative-kafka-broker-fips, opentofu, minio, tekton-pipelines-fips, rancher-agent, podman-fips, commercial-grafana, elastic-agent-fips, aactl, backup-restore-operator, frankenphp-8.5, gitlab-rails-ce, kube-conformance, rancher, upwind-agent, mattermost,...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: keda-fips, knative-kafka-broker-fips, opentofu, minio, tekton-pipelines-fips, rancher-agent, podman-fips, commercial-grafana, elastic-agent-fips, aactl, backup-restore-operator, frankenphp-8.5, gitlab-rails-ce, kube-conformance, rancher, upwind-agent, mattermost,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: keda-fips, splunk-otel-collector, apko-fips, chainloop-cli-fips, splunk-otel-collector-fips, knative-kafka-broker-fips, trufflehog-fips, apko, grype, argocd-image-updater, opentofu, minio, tekton-pipelines-fips, rancher-agent, podman-fips, commercial-grafana,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: keda-fips, splunk-otel-collector, apko-fips, chainloop-cli-fips, crossplane-provider-azure-search, crossplane-provider-azure-policyinsights, splunk-otel-collector-fips, knative-kafka-broker-fips, trufflehog-fips, docker-machine-driver-harvester, apko,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: keda-fips, splunk-otel-collector, apko-fips, chainloop-cli-fips, crossplane-provider-azure-search, crossplane-provider-azure-policyinsights, splunk-otel-collector-fips, knative-kafka-broker-fips, trufflehog-fips, docker-machine-driver-harvester, apko,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, crossplane-provider-aws-scheduler-fips, knative-kafka-broker-fips, flux-operator, grype, crossplane-provider-aws-eks-fips, rancher-agent, flux-kustomize-controller-fips, terraform-provider-azapi, caddy-fips,...

SUSE CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

UBUNTU-CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

CVE-2026-48961 IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

GuardDog 安全漏洞

GuardDog is an open-source CLI tool developed by GuardDog, which allows for the identification of malicious PyPI packages. Versions 1.0.0 to 2.9.0 of GuardDog contain security vulnerabilities. These vulnerabilities stem from the use of blind strings in the programmatic remote project scanning...

@fedify/botkit (>=0.4.0-dev.184, <=0.5.0-dev.198), @fedify/botkit-sqlite (>=0.4.0-dev.184, <=0.5.0-dev.198) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.1.0, <=2.1.13)

@fedify/fedify NPM version =2.1.0, =0.4.0-dev.184, =0.4.0-dev.184, =2.1.0, =2.1.13 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...

@fedify/cli (>=2.2.0-dev.898, <=2.2.2) potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.2.0, <=2.2.2)

@fedify/fedify NPM version =2.2.0, =2.2.0-dev.898, =2.2.2 Source cves: CVE-2026-42462 Source advisory: OSV:GHSA-9RFG-V8G9-9367...

@fedify/cli (>=2.2.0-dev.898, <=2.2.2) potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.2.0, <=2.2.2)

@fedify/fedify NPM version =2.2.0, =2.2.0-dev.898, =2.2.2 Source cves: CVE-2026-42462 Source advisory: SNYK:JS-FEDIFYFEDIFY-16895732...

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +1 more potentially affected by CVE-2026-42462 via @fedify/fedify (>=2.0.0, <=2.0.17)

@fedify/fedify NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.17 Source cves: CVE-2026-42462 Source advisory: SNYK:JS-FEDIFYFEDIFY-16895732...

Malicious Package

Overview lynx-keeper-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in indextts-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc206ef48bfccaec8e81aac2b666e2d54a4a027e8432cc1d08d3823cf333caca setup.py executes git clone --depth 1 --branch dev-3.12 https://github.com/gabry-lab/index-tts during the buildpy / egginfo / sdist / bdistwheel...

MAL-2026-4794 Malicious code in indextts-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc206ef48bfccaec8e81aac2b666e2d54a4a027e8432cc1d08d3823cf333caca setup.py executes git clone --depth 1 --branch dev-3.12 https://github.com/gabry-lab/index-tts during the buildpy / egginfo / sdist / bdistwheel...

Malicious code in @iola_adm/iola-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e28a7ca88c4000d6efee1c0e324c8f28bebf03ef988e2ac3aa437857f34ee08 src/cli.js contains a hardcoded endpoint https://apiiola.yasg.ru referenced multiple times lines 1, 2, 198 and invoked via fetch at line 256, in code...

Malicious code in wdb-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...

MAL-2026-4713 Malicious code in wdb-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...