16853 matches found
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: tekton-chains, kubescape, policy-controller, apko, vexctl, melange, zot, flux-source-controller, ko, aactl, neuvector-sigstore-interface, slsa-verifier, spire-server, zarf, skaffold, goreleaser, gitsign, falcoctl, wolfictl, tkn...
ROOT-APP-NPM-CVE-2026-67214 CVE-2026-67214 in nanoid - Patched by Root
Root has patched CVE-2026-67214 in the nanoid package for Root:npm. Multiple fixed versions available...
CVE-2026-73415 vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter...
CVE-2026-73502 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-securityhub, crossplane-provider-aws-cloudcontrol, crossplane-provider-aws-mediastore, crossplane-provider-aws-dataexchange, grafana, terraform-provider-grafana, crossplane-provider-aws-licensemanager-fips,...
Malicious code in fmt-util-k7x2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8613ffc5393a31685344c247925a5ef104f7daf3f0d2f45a51918adba7d344 [email protected] advertises itself as a trivial string-formatting utility index.js exports two-line pad/trim helpers, but its package.json declare...
MAL-2026-13950 Malicious code in fmt-util-k7x2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8613ffc5393a31685344c247925a5ef104f7daf3f0d2f45a51918adba7d344 [email protected] advertises itself as a trivial string-formatting utility index.js exports two-line pad/trim helpers, but its package.json declare...
CVE-2026-58438
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-58438
CVE-2026-58438 (Gitea) : Cross-repository IDOR in issue-dependency removal. The RemoveDependency path in routers/web/repo/issue_dependency.go fetches the dep issue by ID without repository or permission checks, enabling a user with write access to one repo (ownerA/repoA) to delete a dependency li...
CVE-2026-6470
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...
EUVD-2026-57856
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...
CLEANSTART-2026-ZL34069 Security fixes in cortex 1.20.1-r2
Package cortex version 1.20.1-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-ES11075 Security fixes in argo-events 1.9.10-r1
Package argo-events version 1.9.10-r1 fixes 17 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33186, ghsa-mh2q-q3fh-2475, CVE-2026-29181...
CLEANSTART-2026-EU00318 Security fixes in argo-workflows 3.7.17-r1
Package argo-workflows version 3.7.17-r1 fixes 16 vulnerabilities: ghsa-3ppc-4f35-3m26, ghsa-7r86-cg39-jmmj, ghsa-23c5-xmqv-rm74, ghsa-xv26-6w52-cph6, ghsa-q3j6-qgpj-74h6...
CLEANSTART-2026-TD64731 Security fixes in fulcio 1.8.7-r2
Package fulcio version 1.8.7-r2 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...
CLEANSTART-2026-KJ21484 Security fixes in argo-events 1.6.3-r1
Package argo-events version 1.6.3-r1 fixes 9 vulnerabilities: CVE-2022-1996, ghsa-r48q-9g5r-8q2h, ghsa-p77j-4mvh-x3m3, ghsa-m425-mq94-257g, CVE-2026-33186...
CLEANSTART-2026-TQ54429 Security fixes in kube-logging-operator 6.7.0-r2
Package kube-logging-operator version 6.7.0-r2 fixes 9 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-44024, CVE-2026-44025, CVE-2026-44160...
CLEANSTART-2026-OI56852 Security fixes in spark-sc213-jdk17-py312 3.4.4-r1
Package spark-sc213-jdk17-py312 version 3.4.4-r1 fixes 26 vulnerabilities: CVE-2024-47561, ghsa-rhrv-645h-fjfh, CVE-2023-39410, ghsa-r7pg-v2c8-mfg3, CVE-2024-7254...