46 matches found
CLEANSTART-2026-ME27346 Security fixes in rekor-backfill-index 1.4.3-r1
Package rekor-backfill-index version 1.4.3-r1 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is an open-source control plane for teams of artificial intelligence AI agents, and both paths rely on importing a malicious agent and starting it. A third flaw could expo...
CLEANSTART-2026-TR82670 Security fixes in prometheus-redis-exporter 1.87.0-r0
Package prometheus-redis-exporter version 1.87.0-r0 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...
CLEANSTART-2026-HT43214 Security fixes in cadvisor 0.60.2-r1
Package cadvisor version 0.60.2-r1 fixes 2 vulnerabilities: ghsa-xjvp-4fhw-gc47, CVE-2026-41579...
CLEANSTART-2026-AQ74255 Security fixes in cadvisor 0.57.0-r1
Package cadvisor version 0.57.0-r1 fixes 2 vulnerabilities: ghsa-xjvp-4fhw-gc47, CVE-2026-41579...
CLEANSTART-2026-ZH32905 Security fixes in kyverno-fips 1.17.1-r2
Package kyverno-fips version 1.17.1-r2 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...
GHSA-8WHX-365G-H9VV vulnerabilities
Vulnerabilities for packages: pghero, pghero-fips, gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, ruby4.0-rails, gitlab-rails-ce-fips, ruby3.4-rails...
GHSA-GGVW-PP2V-J3GM vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-azure, linux-qemu-melange, linux-gcp...
GHSA-X35M-3GP4-4FH5 vulnerabilities
Vulnerabilities for packages: juicefs, dapr...
GHSA-65RF-W3QG-H7VH vulnerabilities
Vulnerabilities for packages: firefox-esr...
GHSA-QW95-8564-VHVR vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-57XV-4VP5-7V49 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-XJQX-FRCX-9W6G vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, flux-image-automation-controller, k3s, trufflehog-fips, kubernetes, rancher-agent, cloud-provider-aws, trivy-operator-fips, mapotf, vitess, calico-fips, guac, flux-source-controller, step-issuer, argo-workflows, wolfictl, kube-state-metrics,...
GHSA-52X6-GQ3R-VPF4 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-MPWR-8VM7-H73F vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-sql, crossplane-provider-azure-authorization, nfpm, goreleaser, gobuster, crossplane-provider-family-azure, nuclei, cert-manager, x509-certificate-exporter, telegraf, splunk-otel-collector, external-secrets-operator, grafana,...
GHSA-68VW-XV3C-52VP vulnerabilities
Vulnerabilities for packages: expat...
GHSA-H67P-54HQ-RP68 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, code-server, py3-jupyterlab, argo-workflows, thingsboard, lerna, saf, airflow, vitess, opensearch-dashboards, eslint, prism, tileserver-gl, langfuse, pulumi, renovate, kubeflow-katib, sqlpad, ts-patch...