EUVD-2023-3036

Malicious code in bioql PyPI...

EUVD-2023-29703

Malicious code in bioql PyPI...

EUVD-2023-3159

Malicious code in bioql PyPI...

EUVD-2024-1492

Malicious code in bioql PyPI...

EUVD-2024-36154

Malicious code in bioql PyPI...

EUVD-2023-53715

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, wire-go, oauth2-proxy, kapp, k3d, docker-cli, kuma, neuvector-sigstore-interface, kor, aws-eks-pod-identity-agent, dgraph, nri-rabbitmq, google-osconfig-agent, terraform-provider-azapi, clickhouse-operator, rabbitmq-messaging-topology-operator,...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-fleet, envoy-gateway, kots, pluto, helm-operator, chart-testing, cilium-cli, zot, cert-manager-cmctl, k8sgpt, eksctl, helm-docs, cerbos, kargo, trivy-operator, zarf, helm-push, tw, cluster-api-helm-controller, istio, k9s, trivy, kubescape,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-fleet, envoy-gateway, kots, pluto, helm-operator, chart-testing, cilium-cli, zot, cert-manager-cmctl, k8sgpt, eksctl, helm-docs, cerbos, kargo, trivy-operator, zarf, helm-push, cluster-api-helm-controller, istio, k9s, trivy, kubescape,...

GHSA-F9F8-9PMF-XV68 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-fleet, envoy-gateway, kots, pluto, helm-operator, chart-testing, cilium-cli, zot, cert-manager-cmctl, k8sgpt, eksctl, helm-docs, cerbos, kargo, trivy-operator, zarf, helm-push, cluster-api-helm-controller, istio, k9s, trivy, kubescape,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-fleet, envoy-gateway, kots, pluto, helm-operator, chart-testing, cilium-cli, zot, cert-manager-cmctl, k8sgpt, eksctl, helm-docs, cerbos, kargo, trivy-operator, zarf, helm-push, tw, cluster-api-helm-controller, istio, k9s, trivy, kubescape,...

CVE-2025-53547 vulnerabilities

Vulnerabilities for packages: trivy, linkerd2, zarf, chart-testing, kuma, eksctl, linkerd2-fips, helm-operator, chartmuseum-fips, helm-docs, flux-source-controller-fips, istio, consul-k8s, trivy-fips, envoy-gateway, k8ssandra-client-fips, rancher-helm, cluster-api-helm-controller, harbor,...

GHSA-557J-XG8C-Q2MM vulnerabilities

Vulnerabilities for packages: trivy, linkerd2, zarf, chart-testing, kuma, eksctl, linkerd2-fips, helm-operator, chartmuseum-fips, helm-docs, flux-source-controller-fips, istio, consul-k8s, trivy-fips, envoy-gateway, k8ssandra-client-fips, rancher-helm, cluster-api-helm-controller, harbor,...

CVE-2024-36542

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2023-36822

Uptime Kuma, a self-hosted monitoring tool, has a path traversal vulnerability in versions prior to 1.22.1. Uptime Kuma allows authenticated users to install plugins from an official list of plugins. This feature is currently disabled in the web interface, but the corresponding API endpoints are...

CVE-2023-36821

Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Uptime Kuma allows authenticated users to install plugins from an official list of plugins. This feature is...

CVE-2023-26777

Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the statuspage.js endpoint...

CVE-2023-25810

Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma status page allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability...

CVE-2023-25811

Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma name parameter allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability...

CVE-2023-49804

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...