GO-2023-1571 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, wireguard-go, dynamic-localpv-provisioner-fips, grpcurl, kubeflow-katib, kubeflow, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, kubeflow-fips, k3d, hey, dynamic-localpv-provisioner, go, restic, gke-gcloud-auth-plugin...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: go, gke-gcloud-auth-plugin, dynamic-localpv-provisioner, hey, k3d, kubeflow-katib, restic, terraform-provider-sendgrid, wireguard-go, kubeflow, grpcurl...

EUVD-2026-37144

OpenClaw: Workspace .env CLOUDSDKPYTHON could influence Gmail setup gcloud execution...

OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution

Summary Workspace .env CLOUDSDKPYTHON could influence Gmail setup gcloud execution. In affected versions, a workspace .env in a repository opened by a trusted operator could influence which Python runtime gcloud used through CLOUDSDKPYTHON. This advisory is scoped to the named feature and...

NPM: OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution

NPM: OpenClaw: Workspace .env CLOUDSDKPYTHON could influence Gmail setup gcloud execution vulnerability discovered by ? in WordPress Npm openclaw versions 2026.5.2...

GHSA-9FR2-P65V-GQXQ Duplicate Advisory: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-fq9j-vw4w-fr6v. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to...

CVE-2026-53842 OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable

OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace .env files to influence Python runtime selection through CLOUDSDKPYTHON during Gmail setup gcloud execution. Attackers with repository access can manipulate the CLOUDSDKPYTHON variable to execute...

CVE-2026-40113

PraisonAI is a multi-agent teams system. Prior to 4.5.128, deploy.py constructs a single comma-delimited string for the gcloud run deploy --set-env-vars argument by directly interpolating openaimodel, openaikey, and openaibase without validating that these values do not contain commas. gcloud use...

MAL-2026-4789 Malicious code in ggk-happy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d747cc7acd8bbc1defbf475aa3202fd332fd43135a6fedddfcc37356ce02eb54 Package presents itself as the legitimate slopus/happy CLI README instructs npm install -g happy; homepage, repository, bugs, and author fields all...

CVE-2026-40113 PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

PraisonAI is a multi-agent teams system. Prior to 4.5.128, deploy.py constructs a single comma-delimited string for the gcloud run deploy --set-env-vars argument by directly interpolating openaimodel, openaikey, and openaibase without validating that these values do not contain commas. gcloud use...

CVE-2026-40113

PraxionAI’s CVE-2026-40113 affects PraisonAI before version 4.5.128. The flaw arises in deploy.py, which builds a single comma-delimited string for gcloud run deploy --set-env-vars by directly interpolating openai_model, openai_key, and openai_base without validating for commas. Since gcloud uses...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, aws-efs-csi-driver, nri-f5, pulumi, kind, k8sgpt-operator, metallb, nri-mongodb, dataplaneapi, cass-operator, pulumi-language-yaml, secrets-store-csi-driver-provider-gcp, tailscale, dynamic-localpv-provisioner, nri-apache,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, aws-efs-csi-driver, nri-f5, pulumi, kind, k8sgpt-operator, metallb, nri-mongodb, dataplaneapi, cass-operator, pulumi-language-yaml, secrets-store-csi-driver-provider-gcp, tailscale, dynamic-localpv-provisioner, nri-apache,...

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that targets Apple macOS systems with the goal of stealing users' Google Cloud credentials from a narrow pool of victims. The package, named "lr-utils-lib," attracted a total of 59 downloads...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, aws-efs-csi-driver, nri-f5, pulumi, kind, k8sgpt-operator, metallb, nri-mongodb, dataplaneapi, cass-operator, pulumi-language-yaml, secrets-store-csi-driver-provider-gcp, tailscale, dynamic-localpv-provisioner, nri-apache,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kots, bom, mc, ip-masq-agent, aws-efs-csi-driver, pulumi, kind, pulumi-language-yaml, nginx-stable, secrets-store-csi-driver-provider-gcp, kubescape, dynamic-localpv-provisioner, oauth2-proxy, kubewatch, metrics-server, nats, rqlite, kubevela, envoy-ratelimit,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, wireguard-go, dynamic-localpv-provisioner-fips, grpcurl, kubeflow-katib, kubeflow, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, kubeflow-fips, k3d, hey, dynamic-localpv-provisioner, go, restic, gke-gcloud-auth-plugin...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: kube-state-metrics, wireguard-go, dynamic-localpv-provisioner-fips, grpcurl, kubeflow-katib, kubeflow, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, kubeflow-fips, k3d, hey, dynamic-localpv-provisioner, go, restic, gke-gcloud-auth-plugin...

google-cloudstorage-commands 命令注入漏洞

google-cloudstorage-commands is a set of commands for node and gcloud interactions from the individual developers at sam. A security vulnerability exists in google-cloudstorage-commands, which stems from the vulnerability of this package to command injection attacks...

Malicious code in nodejs-gcloud-pubsub-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40eb63d0a4ed52650bf16d9a4d3a4cc2a9e305ba71dadfa7f7276be2f36ab743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...