dataverk-airflow (>=1.8.0, <=1.8.2), plexflow (>=0.0.168, <=0.0.180) potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (8.4.2)

apache-airflow-providers-cncf-kubernetes PYPI version 8.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - dataverk-airflow =1.8.0, =0.0.168, =0.0.180 Source cves: CVE-2026-27173 Source...

dag-factory (0.23.0a3), dataflow-airflow (>=2.10.5, <=2.10.10) +3 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (>=10.4.2rc1, <=10.10.0)

apache-airflow-providers-cncf-kubernetes PYPI version =10.4.2rc1, =2.10.5, =0.4.3, =0.0.1rc1, =2.10.7rc1, =2.10.11rc5 Source cves: CVE-2026-27173 Source advisory: OSV:GHSA-524W-VQ63-2XHF...

airflow-duckdb (>=0.0.1, <=0.1.2), airflow-tools (0.1.2) +14 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (>=1.0.2, <=10.10.0)

apache-airflow-providers-cncf-kubernetes PYPI version =1.0.2, =0.0.1, =0.0.4rc1, =0.0.0, =2.10.5, =0.5.0, =0.1.0, =14.4.0, =0.0.9, =1.3.0, =2.0.0, =0.1.0, =0.0.168, =0.0.1rc1, =0.1.4 and more Source cves: CVE-2026-27173 Source advisory: MEND:CVE-2026-27173...

AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...

EUVD-2021-1352

Malware in sbrugna...

EUVD-2019-19300

Malware in sbrugna...

EUVD-2020-29507

Malware in sbrugna...

EUVD-2020-29508

Malware in sbrugna...

EUVD-2020-29512

Malware in sbrugna...

EUVD-2020-29509

Malware in sbrugna...

EUVD-2023-1930

Malicious code in bioql PyPI...

EUVD-2025-12401

Malicious code in bioql PyPI...

EUVD-2025-22653

Malicious code in bioql PyPI...

CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

CVE-2025-30086: Exposure of Sensitive Information to an Unauthorized Actor

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

CVE-2025-30086

CNCF Harbor versions 2.13.x before 2.13.1 and 2.12.x before 2.12.4 are vulnerable to an ORM Leak in the /api/v2.0/users endpoint. An attacker with administrator access can abuse the q URL parameter to filter by column, specifically using password=~ to extract user password hash and salt values ch...

CVE-2025-30086

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploit an ORM Leak present in the /api/v2.0/users endpoint to leak users' password hash and salt values. The q URL parameter allows a user to filter users by any column, and filter...

PT-2025-30605

Name of the Vulnerable Software and Affected Versions CNCF Harbor versions 2.12.0 through 2.12.3 CNCF Harbor versions 2.13.0 through 2.13.0 Description An ORM leak exists in the /api/v2.0/users endpoint, allowing administrators to potentially disclose users' password hash and salt values. The q U...