net.snowflake:spark-snowflake_2.11 (>=2.8.5-spark_2.3, <=2.8.6-spark_2.4), net.snowflake:spark-snowflake_2.12 (>=2.8.5-spark_2.4, <=2.8.6-spark_3.0) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.2)

net.snowflake:snowflake-jdbc MAVEN version 3.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.8.5-spark2.3, =2.8.5-spark2.4, =16.14.3, =16.14.3, =16.14.3,...

us.fatehi:schemacrawler-distrib (16.15.1), us.fatehi:schemacrawler-docker (16.15.1) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.4)

net.snowflake:snowflake-jdbc MAVEN version 3.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-distrib 16.15.1 - us.fatehi:schemacrawler-docker 16.15.1 -...

docker-compose-control-center (3.1.0) potentially affected by CVE-2026-15307 via django (2.1.10)

django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2026-15307 via django (2.1.8)

django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

docker-compose-control-center (>=3.1.1, <=3.1.2) potentially affected by CVE-2026-15307 via django (2.1.11)

django PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =3.1.1, =3.1.2 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

CVE-2026-37236 affecting package docker-compose for versions less than 2.27.0-14

CVE-2026-37236 affecting package docker-compose for versions less than 2.27.0-14. A patched version of the package is available...

CVE-2026-78662 affecting package docker-compose for versions less than 2.27.0-14

CVE-2026-78662 affecting package docker-compose for versions less than 2.27.0-14. A patched version of the package is available...

CVE-2026-56855 affecting package docker-compose for versions less than 2.27.0-14

CVE-2026-56855 affecting package docker-compose for versions less than 2.27.0-14. A patched version of the package is available...

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...

CVE-2026-103053

AiSOC versions 9.0.0 before 12.0.0 are vulnerable to an authentication bypass in the response-action API endpoints . This flaw occurs when AISOC_DEV_MODE is enabled and the AISOC_ACTIONS_SERVICE_TOKEN is empty within a default Docker Compose deployment. An unauthenticated attacker can exploit thi...

CVE-2026-103053 AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...

CVE-2026-103053 AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...

CVE-2026-103053: Missing Authentication for Critical Function

AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOCDEVMODE is enabled and AISOCACTIONSSERVICETOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list response-action integrations, submit and approve...

holos v0.6.3

Docker compose for KVM. Define multi-VM stacks in one YAML file. No libvirt, no XML, no distributed control plane. Website and docs: https://zeroecco.github.io/holos/ The primitive is a VM, not a container. Every workload instance gets its own kernel boundary, qcow2 overlay, cloud-init seed, and...

CLEANSTART-2026-QH82064 Security fix for GHSA-4c29-8rgm-jvjj applied in: docker 29.3.0-r1, docker-compose 5.1.0-r0

GHSA-4c29-8rgm-jvjj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IP63543 Security fix for CVE-2026-33747 applied in: docker-compose 5.1.0-r0

Security vulnerability affects the docker-compose package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100781

Security vulnerability affects the docker-compose package. This issue is resolved in later releases. See references for vulnerability details...

codex-security npm-v0.1.28

Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Features Scan repositories, selected paths, or Git changes. Deep scans run parallel discovery workers on repositories and selected paths. Validate candidate...

sonar v0.9.1

██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a group — normally th...

django-DefectDojo v3.3.100

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...