GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, neuvector-sigstore-interface, hello-world-golang, vitess, kubernetes-csi-external-snapshotter, harbor-fips, monstache,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, neuvector-sigstore-interface, hello-world-golang, vitess, kubernetes-csi-external-snapshotter, harbor-fips, monstache,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, neuvector-sigstore-interface, hello-world-golang, vitess, kubernetes-csi-external-snapshotter, harbor-fips, monstache,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, neuvector-sigstore-interface, hello-world-golang, vitess, kubernetes-csi-external-snapshotter, harbor-fips, monstache,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, neuvector-sigstore-interface, hello-world-golang, vitess, kubernetes-csi-external-snapshotter, harbor-fips, monstache,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, neuvector-sigstore-interface, hello-world-golang, vitess, kubernetes-csi-external-snapshotter, harbor-fips, monstache,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: nerdctl, aws-signer-notation-plugin-fips, k8ssandra-client-fips, timescaledb-parallel-copy, velero-plugin-for-microsoft-azure-fips, neuvector-sigstore-interface, hello-world-golang, vitess, kubernetes-csi-external-snapshotter, harbor-fips, monstache,...

CVE-2025-12466

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

GO-2025-4075 Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server

Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server...

GHSA-JQMQ-FPWV-P925 Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466 Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466

The issue CVE-2025-12466 affects Drupal Simple OAuth (OAuth2) & OpenID Connect module, specifically versions 6.0.0 through 6.0.6 (before 6.0.7). Root cause is an authentication bypass via an alternate path or channel, enabling bypass of login/authentication. Impact is authenticated bypass risk as...

CVE-2025-12466 Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

Malicious Package

Overview dezcord.js is a malicious package. This is a "typosquatting" package, which means the package name is based on existing repositories, namespaces, or components, it aims to trick users to download the package which contains a malicious code. Payload behavior The malicious payload runs npm...

Malicious Package

Overview etherdjs is a malicious package. This is a "typosquatting" package, which means the package name is based on existing repositories, namespaces, or components, it aims to trick users to download the package which contains a malicious code. Payload behavior The malicious payload runs npm's...