6025 matches found
GHSA-WCH5-XP77-FXG4
creationtimestamp| type| source ---|---|--- 2026-08-04 19:31:47+00:00| seen| https://gist.github.com/alon710/1b2f0c6a49d8d6453f101ab57c6809f5...
GHSA-RWRP-9823-P2XQ
creationtimestamp| type| source ---|---|--- 2026-08-04 18:31:34+00:00| seen| https://gist.github.com/alon710/f760ad982633274fcad75b35ba6ece57...
GHSA-RGH6-RFWX-V388
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
GHSA-MJRX-74JH-7XGW vulnerabilities
Vulnerabilities for packages: privatebin, drupal, nextcloud-server...
MAL-2026-12020 Malicious code in @keyv/redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bb14bdfcd4aae57a41c9e6e04cd5f612b12e0f45fbcb57510ccb44b095e77 Analysis of @keyv/[email protected] produced no a static rule matches and no traced behavioral findings. The package is a Redis storage adapter for the key...
GHSA-539M-9XH6-Q6RR
creationtimestamp| type| source ---|---|--- 2026-08-04 07:31:29+00:00| seen| https://gist.github.com/alon710/d126357e67656e9719515a1cd767a7d2...
GHSA-V8FG-2RW7-Q452
creationtimestamp| type| source ---|---|--- 2026-08-04 05:31:41+00:00| seen| https://gist.github.com/alon710/d6efe0abb614ef8ea563c1fdaaf1246b...
GHSA-2RC9-8CX9-FXPR vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-rails-ce, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips...
GHSA-G6CJ-PR64-35W5
creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...
NPM: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
NPM: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when from is unset vulnerability discovered by ? in WordPress Npm postcss versions = 8.5.22...
EUVD-2026-52373
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile to read an unintended source-map file by supplying an absolute or directory-traversal...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk, zulu-psu...
Malicious code in test-dev-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ca0e645623ac78190f4921a1d577eeaaeaaca953f6310565db2b981d90b21 The package contains three files and produced no a static rule matches and no traced code behaviors of concern. The name and version pattern suggest ...
GHSA-PJP7-Q6WP-97QX
creationtimestamp| type| source ---|---|--- 2026-08-01 02:31:13+00:00| seen| https://gist.github.com/alon710/32cccaf1dfa9c1c40b850f71e29f1c0f...
GHSA-X23C-287F-QQV5 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-6R8X-57C9-28J4 vulnerabilities
Vulnerabilities for packages: superset, mlflow, open-webui...
GHSA-FXF9-RXPJ-26GX vulnerabilities
Vulnerabilities for packages: wget...
GHSA-9F52-RJQV-25QV vulnerabilities
Vulnerabilities for packages: kafbat-ui, keycloak-config-cli, apache-activemq, apache-nifi-registry, jenkins, camunda-zeebe, apache-activemq-fips, kafbat-ui-fips, zipkin, apache-camel-karavan-devmode, camunda...