1608 matches found
EUVD-2020-0254
Malware in sbrugna...
Arbitrary Code Injection
Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Arbitrary Code Injection via th...
CVE-2025-59537
creationtimestamp| type| source ---|---|--- 2025-09-30 16:58:40+00:00| published-proof-of-concept| https://github.com/argoproj/argo-cd/security/advisories/GHSA-wp4p-9pxh-cgx2...
CVE-2025-59531
creationtimestamp| type| source ---|---|--- 2025-09-30 16:58:31+00:00| published-proof-of-concept| https://github.com/argoproj/argo-cd/security/advisories/GHSA-f9gq-prrc-hrhc...
GHSA-2HMJ-97JW-28JH vulnerabilities
Vulnerabilities for packages: thingsboard, strimzi-kafka-operator, spark, apache-activemq-artemis, solr, trino, apache-pulsar...
CVE-2025-59822
creationtimestamp| type| source ---|---|--- 2025-09-23 12:54:32+00:00| published-proof-of-concept| https://github.com/http4s/http4s/security/advisories/GHSA-wcwh-7gfw-5wrr...
Malicious Package
Overview cui-travel-component is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-59420
creationtimestamp| type| source ---|---|--- 2025-09-20 08:10:15+00:00| published-proof-of-concept| https://github.com/authlib/authlib/security/advisories/GHSA-9ggr-2464-2j32...
GHSA-X7HR-W5R2-H6WG vulnerabilities
Vulnerabilities for packages: kibana, opensearch-dashboards, opensearch-dashboards-fips...
Malicious Package
Overview oci-console-plugin-registry is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview oci-plugin-compliance is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
GHSA-QHXP-V273-G94H
creationtimestamp| type| source ---|---|--- 2025-09-14 04:33:01+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lyrhkwlxt72c...
GHSA-JHRQ-QVRM-QR36
creationtimestamp| type| source ---|---|--- 2025-09-12 00:52:40+00:00| seen| https://bsky.app/profile/silverpill.mitra.social.ap.brid.gy/post/3lym2ckpmwpy2...
GHSA-3PVJ-Q7QJ-89FG vulnerabilities
Vulnerabilities for packages: libssh2, libssh...
CVE-2025-10157
creationtimestamp| type| source ---|---|--- 2025-09-10 17:15:33+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f7qq-56ww-84cr...
GHSA-RRJV-57MM-J6CM vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-GCF6-VGCR-474F vulnerabilities
Vulnerabilities for packages: nodejs...
keeshond_editor (>=0.1.0 <=0.13.0), keeshond_migrator (>=0.1.0 <=0.1.1) +2 more potentially affected by unknown CVE via toodee (>=0.2.4 <=0.3.0)
toodee CARGO version =0.2.4, =0.1.0, =0.1.0, =0.10.0, =0.13.0 Source cves: unknown CVE Source advisory: OSV:GHSA-PFP7-VXGR-83PW...