Malicious Package

Overview solana-web3-stable is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

jfrog-cli-2.104.1-1.1 on GA media (moderate)

jfrog-cli-2.104.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10844-1 Rating: moderate Cross-References: CVE-2025-11579 CVSS scores: CVE-2025-11579 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-11579 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA...

OPENSUSE-SU-2026:10844-1 jfrog-cli-2.104.1-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.104.1-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in zest-product (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9081ad708b658c1bd56299e401ca6a764cc9137d99573bc922d38a7381cc30d On npm install, postinstall.js collects host identity and environment data os.hostname, username, process.cwd, process.env values, plus shelled-out...

Malicious Package

Overview @kindo/selfbot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: flux-fips, chainctl-fips, gomplate, teleport, skaffold-fips, trufflehog, argo-events, src-fingerprint, argo-cd-fips, kubescape, gitlab-rails-ce, cerbos-fips, coder-fips, cg, k9s-fips, trivy-fips, wolfictl, argocd-image-updater-fips, chainloop-cli, mapotf,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: flux-fips, chainctl-fips, gomplate, teleport, skaffold-fips, trufflehog, argo-events, src-fingerprint, argo-cd-fips, kubescape, gitlab-rails-ce, cerbos-fips, coder-fips, cg, k9s-fips, trivy-fips, wolfictl, argocd-image-updater-fips, chainloop-cli, mapotf,...

[SECURITY] Fedora 44 Update: jfrog-cli-2.98.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 44 : jfrog-cli (2026-6b87863841)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b87863841 advisory. Upstream release 2.98.0. https://github.com/jfrog/jfrog-cli/releases/tag/v2.98.0 Resolves the following security issues: CVE-2025-11579 CVE-2025-665...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kube-arangodb, cluster-api-helm-controller-fips, flux-fips, chartmuseum-fips, envoy-gateway, pluto-fips, cert-manager-cmctl-fips, kube-arangodb-fips, tigera-operator-fips, cert-manager-cmctl, eksctl, jfrog-cli, harbor-fips, kubescape-server-fips, cloudbeat-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: gomplate, filebrowser, datadog-agent-fips, commercial-chainloop-backend, spegel-fips, cloud-provider-aws, kube-mgmt-fips, k8ssandra-client-fips, sriov-network-device-plugin-fips, fuse-overlayfs-snapshotter, cluster-autoscaler-fips, gitlab-rails-ce, vault, beats-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: gomplate, filebrowser, datadog-agent-fips, commercial-chainloop-backend, spegel-fips, cloud-provider-aws, kube-mgmt-fips, k8ssandra-client-fips, sriov-network-device-plugin-fips, fuse-overlayfs-snapshotter, cluster-autoscaler-fips, gitlab-rails-ce, vault, beats-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: metacontroller, crossplane-provider-sql, cluster-proportional-autoscaler, kyverno-policy-reporter-plugins-kyverno, nginx-kubernetes-ingress-fips, rke2-cloud-provider-fips, mockery, gomplate, maru, filebrowser, temporal, grpc-health-probe, harbor-cli,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: flux-fips, chainctl-fips, gomplate, teleport, skaffold-fips, trufflehog, argo-events, src-fingerprint, argo-cd-fips, kubescape, gitlab-rails-ce, cerbos-fips, cg, k9s-fips, trivy-fips, wolfictl, argocd-image-updater-fips, commercial-chainloop-cli,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: flux-fips, chainctl-fips, gomplate, teleport, skaffold-fips, trufflehog, argo-events, src-fingerprint, argo-cd-fips, kubescape, gitlab-rails-ce, cerbos-fips, cg, k9s-fips, trivy-fips, wolfictl, argocd-image-updater-fips, commercial-chainloop-cli,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: flux-fips, chainctl-fips, gomplate, teleport, skaffold-fips, trufflehog, argo-events, src-fingerprint, argo-cd-fips, kubescape, gitlab-rails-ce, cerbos-fips, cg, k9s-fips, trivy-fips, wolfictl, argocd-image-updater-fips, commercial-chainloop-cli,...

CVE-2021-41834

JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control, the copy functionality can be used by a low-privileged user to read and copy any artifact that exists in the Artifactory deployment due to improper permissions validation...

CVE-2022-0668

JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user...

CVE-2022-0573

JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a...

CVE-2025-14830

CVE-2025-14830 affects JFrog Artifactory (Workers) versions 7.94.0 through 7.117.9 (and 7.117.10 as the fixed point referenced) due to improper neutralization of input during web page generation, resulting in Cross-Site Scripting (XSS). Root cause: inadequate input handling in the web page genera...