GHSA-67JX-R9PV-98RJ vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-9M3C-QCXR-9X87 vulnerabilities

Vulnerabilities for packages: thingsboard, kayenta-fips, nacos, camunda-zeebe, nacos-docker, camunda, ontop-fips, ontop, kayenta...

CVE-2026-4106

creationtimestamp| type| source ---|---|--- 2026-04-12 01:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/79929 2026-04-12 02:46:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-4106.yaml 2026-04-12 03:00:07+00:00|...

Malicious code in robase-installer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1edd96cface7dcae9f445d94982ffc19a27e557fae7030e77e6e5646dfdd5c98 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

Exploit for CVE-2026-39866

CVE-2026-39866 — Command Injection via unquoted workflow dispa...

GHSA-GM3X-23WP-HC2C vulnerabilities

Vulnerabilities for packages: traefik...

GHSA-QH6H-P6C9-FF54 vulnerabilities

Vulnerabilities for packages: py3-langchain...

GHSA-R6QV-FRPC-Q66C vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-VGPV-F759-9WX3 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.3-rack, kube-fluentd-operator, ruby3.2-rack, ruby3.4-rack, ruby4.0-rack...

GHSA-XV6W-GXJ8-V943 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-326M-34V3-GV5P vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-6R7G-3MM3-FHW7 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: pluto, dbmate, actions-runner-controller, github-mcp-server, aws-privateca-issuer, newrelic-k8s-metadata-injection, smokescreen, flux-image-automation-controller, victoriametrics, oras, volume-modifier-for-k8s, mariadb-operator, envoy-ratelimit, karpenter,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, oras, atlantis, nsc, hubble, temporal, helm-push, rancher-agent, gatus, sftpgo-plugin-auth, victoriametrics-operator, flux-image-reflector-controller, pvc-autoresizer, aws-s3-controller, swagger, q, argo-workflows, influx, pguser,...

GHSA-QH3H-3QGQ-CXV8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: listmonk, supercronic, goreleaser, oras, flux-image-automation-controller-fips, atlas, secrets-store-csi-driver-provider-aws, nodetaint-fips, fluxcd-kustomize-mutating-webhook, kyverno-policy-reporter-plugins-kyverno, commercial-expanso-edge,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: listmonk, supercronic, goreleaser, oras, flux-image-automation-controller-fips, atlas, secrets-store-csi-driver-provider-aws, nodetaint-fips, fluxcd-kustomize-mutating-webhook, kyverno-policy-reporter-plugins-kyverno, commercial-expanso-edge,...

GHSA-FVCV-3M26-PCQX

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw 2026-04-12 07:51:50+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjbulrf7362m 2026-04-12 23:10:48+00:00| seen|...

GHSA-PHFX-PWWG-945V

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...

CVE-2026-56074

creationtimestamp| type| source ---|---|--- 2026-04-10 19:28:38+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-ffp3-3562-8cv3...