CVE-2026-34525 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

CVE-2026-34513 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

GHSA-M5QP-6W8W-W647 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

CVE-2026-34519 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

GHSA-3WQ7-RQQ7-WX6J vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

CVE-2026-34515 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

GHSA-2VRM-GR82-F7M5 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

CVE-2026-34517 vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa, dask-kubernetes, kubeflow-pipelines-visualization-server, airflow, checkov, kserve...

GHSA-GC5V-M9X4-R6X2 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, py3-cassandra-medusa, airflow, az, confluent-docker-utils, kubeflow-katib, k8s-sidecar, semgrep, py3-pip, dask-kubernetes, kubeflow-jupyter-web-app, checkov, ggshield, kubeflow-volumes-web-app, kserve, pypy-3.11, open-webui, emissary,...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, py3-cassandra-medusa, airflow, az, confluent-docker-utils, kubeflow-katib, k8s-sidecar, semgrep, py3-pip, dask-kubernetes, kubeflow-jupyter-web-app, checkov, ggshield, kubeflow-volumes-web-app, kserve, pypy-3.11, open-webui, emissary,...

BIT-CHECKOV-2021-3040 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted...

BIT-CHECKOV-2021-3035 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution

An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted...

EUVD-2021-26392

Malware in sbrugna...

EUVD-2021-26387

Malware in sbrugna...

EUVD-2025-24606

Malicious code in bioql PyPI...

EUVD-2025-24618

Malicious code in bioql PyPI...

CVE-2025-2180

An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier th...

CVE-2025-2181

A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview checkov is an Infrastructure as code static analysis Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere when cloning external modules from private registries. An attacker can obtain sensitive access keys by...

bridgecrew (>=3.0.0 <=3.2.448), codesecure-core (>=1.0.0b10 <=1.0.29) +6 more potentially affected by CVE-2025-2181 via checkov (>=3.0.0 <=3.2.448)

checkov PYPI version =3.0.0, =3.0.0, =1.0.0b10, =0.2.0, =5.8.0, =5.8.0, =0.2.3, =1.0.0, =1.0.56 Source cves: CVE-2025-2181 Source advisory: SNYK:PYTHON-CHECKOV-11800951...