Malicious code in buildkite-test-collector-playwright-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f3f80367ea53fbaf542c199729a13115d8d848157327188cf365303af1d1f3 The package buildkite-test-collector-playwright-example was found to contain malicious code...

MAL-2026-2735 Malicious code in buildkite-test-collector-playwright-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f3f80367ea53fbaf542c199729a13115d8d848157327188cf365303af1d1f3 The package buildkite-test-collector-playwright-example was found to contain malicious code...

MAL-2026-2734 Malicious code in buildkite-test-collector-mocha-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fbbae0cc3cfcba7b18566c1ab1f61417b1776206c3d0317956058c43ef61fa The package buildkite-test-collector-mocha-example was found to contain malicious code...

MAL-2026-2733 Malicious code in buildkite-test-collector-jest-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa2618170566c342534726ad9c855cf62ad98ee9b6e815e5324c5bc4779da2 The package buildkite-test-collector-jest-example was found to contain malicious code...

MAL-2026-2732 Malicious code in buildkite-test-collector-jasmine-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e8247a020880206aa9a5d4eb40d4b1f61cf39245356fd6e91db063d0c14b79 The package buildkite-test-collector-jasmine-example was found to contain malicious code...

Malicious code in buildkite-test-collector-cypress-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10094969be88bd9f1aa924abf89c5dc58dd70e107adf3c95a3f58c0ba86518 The package buildkite-test-collector-cypress-example was found to contain malicious code...

MAL-2026-2731 Malicious code in buildkite-test-collector-cypress-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10094969be88bd9f1aa924abf89c5dc58dd70e107adf3c95a3f58c0ba86518 The package buildkite-test-collector-cypress-example was found to contain malicious code...

Security Bulletin: IBM Edge Data Collector uses cryptography-44.0.1-cp39-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-26007.

Summary IBM Edge Data Collector uses cryptography-44.0.1-cp39-abi3-manylinux234x8664.whl which is vulnerable to CVE-2026-26007. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-26007 DESCRIPTION: cryptography is a package designed to expose...

Security Bulletin: IBM Edge Data Collector uses pillow-10.3.0-cp39-cp39-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2026-25990.

Summary IBM Edge Data Collector uses pillow-10.3.0-cp39-cp39-manylinux228x8664.whl which is vulnerable to CVE-2026-25990. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-25990 DESCRIPTION: Pillow is a Python imaging library. From 10.3.0 to...

CVE-2026-33784

A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...

CVE-2026-21915

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: xeol, sriov-network-device-plugin, mesosphere-vsphere-csi, docker-cli, flux-source-controller, docker-cli-buildx, trivy-operator, osv-scanner, external-dns, helm-mapkubeapis, prometheus-operator, kots, newrelic-fluent-bit-output, dask-gateway, cerbos, chezmoi,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: karpenter, cloud-provider-aws, mattermost, spire-server, argo-cd, aws-flb-cloudwatch, helm, cilium-cli, aws-flb-firehose, external-dns, gitlab-kas, zot, kine, k8s-device-plugin, kots, dask-gateway, newrelic-fluent-bit-output, kubescape, libnvidia-container,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-node-termination-handler, xeol, sriov-network-device-plugin, mesosphere-vsphere-csi, delve, docker-cli, swagger, crossplane-provider-azure-sql, descheduler, kyverno-policy-reporter-kyverno-plugin, gatus, boring-registry, kyverno-notation-aws, opencost,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: minio-operator, onepassword-operator, virt-handler-fips, wazero-fips, argo-workflows-fips, mariadb-operator, harbor-cli, ingress-nginx-controller-fips, kubeflow-katib, zabbix-agent2-fips, cadence, atlantis, terraform-provider-kubernetes, helm-exporter,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: minio-operator, cluster-api-fips, onepassword-operator, buildah-fips, ctop, kaf, prometheus-adapter, croc, dataplaneapi-fips, argo-workflows-fips, haproxy-ingress, harbor-cli, mariadb-operator, mig-parted-fips, terraform-provider-databricks-fips, q,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: minio-operator, cluster-api-fips, onepassword-operator, buildah-fips, ctop, kaf, prometheus-adapter, croc, dataplaneapi-fips, argo-workflows-fips, haproxy-ingress, harbor-cli, mariadb-operator, mig-parted-fips, terraform-provider-databricks-fips, q,...

EUVD-2026-21078

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

EUVD-2026-21203

A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...

CVE-2026-33784

A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...