GO-2026-4340 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, nri-couchbase, guac, cert-manager-cmctl, cfssl, cloud-provider-vsphere, litefs, scorecard, opentofu, timescaledb-parallel-copy, crossplane-provider-aws-rds, azcopy, metacontroller, boring-registry, lazygit, vault-benchmark,...

ansible-lint-26.8.0-1.1 on GA media (moderate)

ansible-lint-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11503-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

OPENSUSE-SU-2026:11503-1 ansible-lint-26.8.0-1.1 on GA media

These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76429

These are all security issues fixed in the ansible-lint-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in devplatform-cli-plugin-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8460a9cc2fce88e69d25156ea88612a5a67ffba26709ce88900d573e2f4b3ea On require of the package, index.js loads bootstrap.js which selects a platform-specific asset path linuxx64, linuxarm64, darwin, win32, downloads an...

Malicious code in folder-lint (npm)

npm/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

MAL-2026-11972 Malicious code in folder-lint (npm)

npm/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

MAL-2026-11868 Malicious code in @servicetitan/folder-lint (npm)

npm/@servicetitan/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

BIT-HELM-2026-63308 Helm Files.Lines Denial of Service via Empty Chart Files

Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template helper in pkg/engine/files.go that allows attackers to trigger an index out of range panic by including zero-length byte slices in chart files. Attackers can include empty files in...

SUSE CVE-2026-29051

melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, melange lint --persist-lint-results opt-in flag, also usable via melange build --persist-lint-results constructs output file paths by joining --out-dir with the arch and...

webp-https-errors (4.7.2) potentially affected by unknown CVE via prettier-lint-lenz (2.6.4)

prettier-lint-lenz NPM version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on prettier-lint-lenz and may be impacted: - webp-https-errors 4.7.2 Source cves: unknown CVE Source advisory: SNYK:JS-PRETTIERLINTLENZ-18505266...

CVE-2026-63308

Helm

PT-2026-60806

Name of the Vulnerable Software and Affected Versions Helm versions prior to 4.2.4 Description A denial of service issue exists in the Files.Lines template helper within pkg/engine/files.go. An attacker can trigger an index out of range panic by including zero-length byte slices in chart files...

Malicious code in workspace-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 337be691dd0efaac223695a5cb4f51ab5cdcc6b3ccde983b86d7256b10d731a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10112 Malicious code in workspace-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 337be691dd0efaac223695a5cb4f51ab5cdcc6b3ccde983b86d7256b10d731a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-7312 Malicious code in lint-prettier (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lint-prettier (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-plugin-click-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6897 Malicious code in ts-lint-builders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df315c6d57a990f1016fd08f41ed7abfcec2aa6863dc04fb453e009d779b3a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6843 Malicious code in lint-builds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59bcbbdb88e5ffa12155537c268d8b8a50d9cfd88a462fe9219289e8226b772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...