litmus

LitmusChaos Open Source Chaos Engineering Platform Read this inother languages. 🇰🇷 🇨🇳 🇧🇷 🇮🇳 🇪🇸 Overview LitmusChaos is an open source Chaos Engineering platform that enables teams to identify weaknesses & potential outages in infrastructures by inducing chaos tests in a controlled way. Developers &...

chaos-mesh

Chaos Mesh is an open source, cloud-native Chaos Engineering platform for Kubernetes. It uses Kubernetes custom resources to define, orchestrate, and observe controlled fault injection against workloads, infrastructure, cloud services, and applications. Chaos Mesh is a Cloud Native Comp...

kubescape

...

opa

Open Policy Agent Open Policy Agent（OPA）是一个开源、通用策略引擎，可在整个技术栈中实现统一、上下文感知的策略执行。 OPA 很荣幸成为 Cloud Native Computing Foundation（CNCF）领域的毕业项目。详情请阅读 CNCF 公告。 开始使用 OPA 使用 Rego Playground 编写您的第一条 Rego 策略，或通过它分享您的工作以获取反馈和支持。如果您不确定从何入手，可以查看 访问控制示例。 安装 VS Code 扩展 以在本地开始使用实时诊断、调试和格式化功能。有关其他受支持的编辑器，请参阅 Editor a...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...

EUVD-2020-29509

Malware in sbrugna...

EUVD-2019-19300

Malware in sbrugna...

EUVD-2020-29507

Malware in sbrugna...

EUVD-2021-1352

Malware in sbrugna...

EUVD-2020-29508

Malware in sbrugna...

EUVD-2020-29512

Malware in sbrugna...

EUVD-2025-12401

Malicious code in bioql PyPI...

EUVD-2025-22653

Malicious code in bioql PyPI...

EUVD-2023-1930

Malicious code in bioql PyPI...

CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

CVE-2025-30086

CVE-2025-30086 affects CNCF Harbor: Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 are vulnerable to an ORM leak via the /api/v2.0/users endpoint. The q URL parameter lets an administrator filter by any column and abuse password=~ to leak a user’s password hash and salt character by charact...

CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...