GHSA-XX64-WWV2-HCQQ vulnerabilities

Vulnerabilities for packages: uv, pixi...

GHSA-FP55-JW48-C537 vulnerabilities

Vulnerabilities for packages: uv, pixi...

GHSA-PP6C-GR5W-3C5G vulnerabilities

Vulnerabilities for packages: airflow, reflex, semgrep...

GHSA-2C5C-CHWR-9HQW vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, spark, apache-hop, druid, spark-fips, apache-hop-fips, opensearch, trino, opensearch-fips, camunda-zeebe, spark-kubernetes-operator, camunda...

GHSA-P3HW-MV63-RF9W vulnerabilities

Vulnerabilities for packages: cargo-c, codex, jujutsu, cargo-audit...

GHSA-RMX9-2PP3-XHCR vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains...

GHSA-Q6V9-R226-V65F

creationtimestamp| type| source ---|---|--- 2026-05-07 04:10:29+00:00| seen| https://gist.github.com/alon710/60dab51279f6b991c4df239e6fd329b2...

GHSA-FPF5-4JW8-67X8

creationtimestamp| type| source ---|---|--- 2026-05-07 02:10:29+00:00| seen| https://gist.github.com/alon710/fbdb426cde042168e0871c7f8c96676d...

GHSA-XP3W-R5P5-63RR vulnerabilities

Vulnerabilities for packages: vector, rpm-sequoia, rustls-openssl-client, sdp-k8s-injector, typst, komodo, sentry-cli, sccache, sqlx, rustup, valkey-ldap, deno, ztunnel-fips, guestproxyagent, bootc...

GHSA-FPJQ-C37H-CQCV vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno...

CVE-2026-44009

creationtimestamp| type| source ---|---|--- 2026-05-03 21:34:48+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-9vg3-4rfj-wgcm 2026-07-09 07:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq753cw5on2d...

Fedora 44 : GitPython (2026-9342da13e0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9342da13e0 advisory. Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67. Tenable has extracted the preceding descriptio...

CVE-2026-44005

creationtimestamp| type| source ---|---|--- 2026-05-01 20:42:00+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq 2026-07-09 07:48:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75fzsvsz2q 2026-09-12 10:00:05+00:0...

GHSA-V898-XG3C-W4RJ vulnerabilities

Vulnerabilities for packages: glibc...

GHSA-48WR-P98V-9W5H vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-V4P8-MG3P-G94G vulnerabilities

Vulnerabilities for packages: litellm, airflow...

GHSA-5MFF-CXQ5-82JV vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

Securing the git push pipeline: Responding to a critical remote code execution vulnerability

On March 4, 2026, we received a vulnerability report through our Bug Bounty program from researchers at Wiz describing a critical remote code execution vulnerability affecting github.com, GitHub Enterprise Cloud, GitHub Enterprise Cloud with Data Residency, GitHub Enterprise Cloud with Enterprise...

GHSA-28JG-CGG7-J4WC vulnerabilities

Vulnerabilities for packages: debezium-connector-spanner, debezium-connector-ibmi, debezium, apache-nifi, debezium-connector-informix...

GHSA-PMWG-CVHR-8VH7

creationtimestamp| type| source ---|---|--- 2026-04-24 22:53:42+00:00| seen| Telegram/Vx6nINpqXkyN9lWmYzg7wzzb7SobZ66OCYhgiINimz-nM3E 2026-05-05 05:40:29+00:00| seen| https://gist.github.com/alon710/1fe74fd0f0234822bdcb48ade706690f 2026-07-21 12:51:15+00:00| seen|...