GHSA-3WQ7-RQQ7-WX6J vulnerabilities

Vulnerabilities for packages: kserve, dask-kubernetes, kubeflow-pipelines-visualization-server, checkov, py3-cassandra-medusa, open-webui, airflow...

GHSA-966J-VMVW-G2G9 vulnerabilities

Vulnerabilities for packages: kserve, dask-kubernetes, kubeflow-pipelines-visualization-server, checkov, py3-cassandra-medusa, open-webui, airflow...

GHSA-P998-JP59-783M vulnerabilities

Vulnerabilities for packages: kserve, dask-kubernetes, kubeflow-pipelines-visualization-server, checkov, py3-cassandra-medusa, open-webui, airflow...

GHSA-GC5V-M9X4-R6X2 vulnerabilities

Vulnerabilities for packages: kserve, ggshield, confluent-docker-utils, emissary, superset, jupyter-base-notebook, airflow, dask-kubernetes, kubeflow-katib, py3-cassandra-medusa, datadog-agent, open-webui, mlflow, semgrep, kubeflow-volumes-web-app, checkov, jwt-tool, kubeflow-jupyter-web-app, az,...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: kserve, ggshield, confluent-docker-utils, emissary, superset, jupyter-base-notebook, airflow, dask-kubernetes, kubeflow-katib, py3-cassandra-medusa, datadog-agent, open-webui, mlflow, semgrep, kubeflow-volumes-web-app, checkov, jwt-tool, kubeflow-jupyter-web-app, az,...

BIT-CHECKOV-2021-3040 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...

BIT-CHECKOV-2021-3035 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

PT-2026-6006

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...

EUVD-2021-26387

Malware in sbrugna...

EUVD-2021-26392

Malware in sbrugna...

EUVD-2025-24606

Malicious code in bioql PyPI...

EUVD-2025-24618

Malicious code in bioql PyPI...

CVE-2025-2181

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview checkov is an Infrastructure as code static analysis Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere when cloning external modules from private registries. An attacker can obtain sensitive access keys by...

Deserialization of Untrusted Data

Overview checkov is an Infrastructure as code static analysis Affected versions of this package are vulnerable to Deserialization of Untrusted Data via use of eval. An attacker can execute arbitrary code by submitting a specially crafted Terraform file for analysis. This is only exploitable if th...

CVE-2025-2181

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...