32209 matches found
GHSA-R6QV-FRPC-Q66C vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-VGPV-F759-9WX3 vulnerabilities
Vulnerabilities for packages: ruby3.4-rack, ruby3.2-rack, ruby4.0-rack, kube-fluentd-operator, ruby3.3-rack, logstash...
GHSA-326M-34V3-GV5P vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-XV6W-GXJ8-V943 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-6R7G-3MM3-FHW7 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: dkron, gh, hubble, metacontroller, newrelic-k8s-metadata-injection, external-secrets-operator, osv-scanner, nfs-subdir-external-provisioner, nova, dataplaneapi, mariadb-operator, fluxcd-kustomize-mutating-webhook, smokescreen, dgraph, github-mcp-server, polaris,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: knative-serving, rancher-fleet, buildah, fscrypt, esbuild, runc, etcd, kubescape-operator, kots, cluster-proportional-autoscaler, bento, terraform-docs, vt-cli, wuzz, rancher-machine, argo-workflows, pdfcpu, aws-node-termination-handler, aactl, pulumi, flux,...
GHSA-QH3H-3QGQ-CXV8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: dapr-fips, flux-source-watcher, oras, sealed-secrets-fips, karma-fips, omnibump, local-path-provisioner, eks-node-monitoring-agent, fluxcd-kustomize-mutating-webhook-fips, commercial-chainloop-backend, nova-fips, aws-privateca-issuer-fips, dgraph,...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: dapr-fips, flux-source-watcher, oras, sealed-secrets-fips, karma-fips, omnibump, local-path-provisioner, eks-node-monitoring-agent, fluxcd-kustomize-mutating-webhook-fips, commercial-chainloop-backend, nova-fips, aws-privateca-issuer-fips, dgraph,...
GHSA-FVCV-3M26-PCQX
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw 2026-04-12 07:51:50+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjbulrf7362m 2026-04-12 23:10:48+00:00| seen|...
GHSA-PHFX-PWWG-945V
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...
CVE-2026-56074
creationtimestamp| type| source ---|---|--- 2026-04-10 19:28:38+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-ffp3-3562-8cv3...
CVE-2026-40148
creationtimestamp| type| source ---|---|--- 2026-04-10 19:26:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f2h6-7xfr-xm8w...
Arbitrary Code Injection
Overview praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents Affected versions of this package are vulnerable to Arbitrary Code Injection in the executecodedirect function when the AST-based filtering mechanism fails to block dangerous attribute access...
CVE-2026-40115
creationtimestamp| type| source ---|---|--- 2026-04-10 19:23:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2xgv-5cv2-47vv...
GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware
ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware...
CVE-2026-35599
creationtimestamp| type| source ---|---|--- 2026-04-10 15:34:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r4fg-73rc-hhh7...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free in the response file processing due to a dangling pointer to freed memory being stored in the global dependfile and later dereferenced after the response-file buffer is freed. An attacker can cause data corruption or...