4966 matches found
GHSA-M63V-2G9W-2W6V
creationtimestamp| type| source ---|---|--- 2026-07-01 03:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116842484590156234 2026-07-01 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpkjmgapbr23...
GHSA-44HJ-4M45-FRJ3 vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, kube-fluentd-operator, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-J9CW-HWQF-85W7 vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, kube-fluentd-operator, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...
GHSA-5CR4-QWVX-32J2 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-7MQ5-3VCF-V96V vulnerabilities
Vulnerabilities for packages: gitlab-runner...
Malicious code in terminal-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c7e821d2559361693f75e32b42a5e7a0eef5d99c723d0e35b06f12fd91e9600 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @huobi-ui/activity-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dc07679f0c801fbb465a2502687e29ed687871964c5d84c0dd5f2b7f94e8ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-25FP-8W8P-MX36
creationtimestamp| type| source ---|---|--- 2026-06-29 13:27:42+00:00| seen| https://gist.github.com/zSarix/66a6804b1056cbaf4c2940b8f9808613...
GHSA-37JM-QCW2-GCQG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4GXM-V5V7-FQC4 pnpm: Reserved bin name deletes PNPM_HOME during global remove
Maintainer Action Plan Maintainer Action Plan This report is ready to review with the shared patch branch. Start with the PR and the expected fixed behavior, then use the detailed exploit narrative below only if you want to replay the original path. - Advisory: CAND-PNPM-085 / GHSA-4gxm-v5v7-fqc4...
GHSA-5VC5-WXXQ-3FJX
creationtimestamp| type| source ---|---|--- 2026-06-26 22:48:16+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7znrg3ri2v...
GHSA-RGVG-3WPC-H44P
creationtimestamp| type| source ---|---|--- 2026-06-26 22:07:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7xfcnzpe2s...
GHSA-M2V9-299J-RV96 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: argocd-image-updater, calico-fips, seaweedfs-rocksdb-fips, external-secrets-operator-fips, gatekeeper, kaf, nemo, rancher-agent, frankenphp-8.2, cloudbeat-fips, knative-serving-fips, kubevela-fips, etcd, argo-cd-fips, gitea, prometheus, knative-kafka-broker,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, calico-fips, seaweedfs-rocksdb-fips, external-secrets-operator-fips, gatekeeper, kaf, nemo, rancher-agent, frankenphp-8.2, cloudbeat-fips, knative-serving-fips, kubevela-fips, etcd, argo-cd-fips, gitea, prometheus, knative-kafka-broker,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: redpanda-console, argocd-image-updater, mapotf, docker-cli-buildx, chainctl-fips, calico-fips, external-secrets-operator-fips, gatekeeper, kaf, nemo, step-kms-plugin, rancher-agent, frankenphp-8.2, cloudbeat-fips, knative-serving-fips, kubevela-fips, consul-fips, nfp...
GHSA-9CV6-QCJW-4GRX vulnerabilities
Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset...
GHSA-52X6-GQ3R-VPF4 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-MPWR-8VM7-H73F vulnerabilities
Vulnerabilities for packages: cert-manager, telegraf, nuclei, x509-certificate-exporter, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, crossplane-provider-family-azure, crossplane-provider-azure-storage, gobuster, goreleaser, grafana,...