GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, opentelemetry-collector, frankenphp-8.2, mattermost-fips, trivy-operator-fips, kots, nemo, external-secrets-operator, argo-cd-fips, kubernetes-fips, k3s, rancher-agent, tekton-pipelines-fips, loki, gatekeeper, knative-kafka-broker,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, opentelemetry-collector, frankenphp-8.2, mattermost-fips, trivy-operator-fips, kots, teleport-operator-fips, nemo, external-secrets-operator, argo-cd-fips, kubernetes-fips, k3s, rancher-agent, syft, tekton-pipelines-fips, loki,...

GHSA-9CV6-QCJW-4GRX vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-52X6-GQ3R-VPF4 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: external-secrets-operator, grafana, telegraf, crossplane-provider-family-azure, crossplane-provider-azure-storage, gobuster, nfpm, crossplane-provider-azure-authorization, goreleaser, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity,...

GHSA-53WW-G6WP-VWP6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: chisel, loki, nfpm, kine, containerd, wal-g, caddy, crossplane-provider-family-azure, kubescape, terraform-provider-tls, istio, docker-machine-driver-harvester, kargo, zot, flux, pulumi-language-dotnet, spire-server, argo-events, pulumi-language-java, hcloud, helm,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: chisel, loki, nfpm, kine, containerd, wal-g, kubescape, istio, docker-machine-driver-harvester, zot, flux, pulumi-language-dotnet, spire-server, argo-events, pulumi-language-java, helm, opentofu, kaf, cilium-cli, prometheus, rancher-machine, cilium, chezmoi, telegraf...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: chezmoi, gptscript, loki, telegraf, kots, kubernetes-dashboard, nfpm, terragrunt, argo-cd, kine, containerd, gitea, pulumi-language-yaml, nerdctl, flux-image-automation-controller, podman, pulumi-kubernetes-operator, fscrypt, k9s, kubescape, prometheus-operator,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: druid, tez, zookeeper, apache-pulsar, kafka, confluent-kafka, apache-nifi...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: ruby4.0-jrjackson, flyway, kserve-modelmesh, opensearch, logstash, akhq, management-api-for-apache-cassandra-5.0, gradle, thingsboard, apache-pulsar, dependency-track, airflow, nextflow, spark, scala, druid, tez, spdx-tools-java, infinispan, keycloak,...

GHSA-68VW-XV3C-52VP vulnerabilities

Vulnerabilities for packages: expat...

GHSA-93QH-VWRM-C5PW vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: ruby4.0-jrjackson, flyway, opensearch, logstash, akhq, management-api-for-apache-cassandra-5.0, thingsboard, dependency-track, nextflow, spark, scala, druid, spdx-tools-java, infinispan, keycloak, apicurio-registry, ruby3.4-jrjackson, kafka, apache-tika,...

GHSA-434X-W66G-QW3R

creationtimestamp| type| source ---|---|--- 2026-06-24 21:41:59+00:00| seen| https://gist.github.com/moonpiedumplings/7e71121b76c58ecaba4176be9bb827c4...

GHSA-38CX-CQ6F-5755 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-5RVQ-CXJ2-64VF vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-5W46-G9PQ-WH6F

creationtimestamp| type| source ---|---|--- 2026-06-24 07:42:24+00:00| seen| https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5...

Malicious code in @muaththir/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66954b91179d60bfbf1c18e8ed8ed9e6b12ab7b13bc6ab2a4174c3bf063c2c0a On npm install, the package's preinstall lifecycle hook runs node index.js, which collects host identifiers os.userInfo.username, process.cwd, Node...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, logstash, logstash-fips, ruby3.4-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-rails, kube-logging-operator,...