Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

61593 matches found

Chainguard
Chainguard•added 2026/05/22 7:17 p.m.•48 views

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: containerd, helm-exporter-fips, cloudbeat, rancher-helm, newrelic-infrastructure-agent-fips, amazon-ecs-agent, kube-arangodb-fips, falco-no-driver, eksctl, xeol-fips, grype, dagger, osv-scanner, xeol, upwind-agent, manifest-tool, k8ssandra-client, kubescape-server,...

7.8CVSS7.5AI score0.00163EPSS
SaveExploits1
NVD
NVD•added 2026/05/22 2:16 p.m.•24 views

CVE-2026-9277

shell-quote's quote function did not validate object-token inputs against the operator model used by parse. The .op field was backslash-escaped character by character using /./g, which in JavaScript does not match line terminators \n, \r, U+2028, U+2029. A line terminator in .op therefore passed...

9.2CVSS0.00824EPSS
SaveExploits1References39
Cvelist
Cvelist•added 2026/05/22 1:22 p.m.•145 views

CVE-2026-9277 shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

shell-quote's quote function did not validate object-token inputs against the operator model used by parse. The .op field was backslash-escaped character by character using /./g, which in JavaScript does not match line terminators \n, \r, U+2028, U+2029. A line terminator in .op therefore passed...

9.2CVSS0.00824EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies•added 2026/05/22 12:00 a.m.•37 views

PT-2026-42766

Name of the Vulnerable Software and Affected Versions shell-quote versions prior to 1.8.4 Description The quote function fails to validate object-token inputs against the operator model used by parse. Specifically, the .op field is escaped using a regular expression that does not match line...

9.8CVSS7.5AI score0.00824EPSS
SaveExploits1References102
OSSF Malicious Packages
OSSF Malicious Packages•added 2026/05/21 8:17 a.m.•21 views

Malicious code in oh-langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b229927c5bc228764ab11651b10bd06c6ff61edffa820a632c343aeec13037 The package configures Langfuse tracing for Claude Code, Codex, and OpenCode. When the operator runs the bundled CLI without explicitly overriding...

5.5AI score
SaveExploits0References18
OSV
OSV•added 2026/05/21 8:13 a.m.•46 views

CLEANSTART-2026-TL66481 Security fixes for CVE-2024-24786, CVE-2024-35255, CVE-2025-22868, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-44903, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 0.69.1-r0, 0.69.1-r1, 0.87.1-r0, 0.89.0-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.6AI score0.02326EPSS
SaveExploits5References75
OSV
OSV•added 2026/05/21 8:12 a.m.•30 views

CLEANSTART-2026-MV81821 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-44903, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-mh2q-q3fh-2475, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 0.87.1-r0, 0.87.1-r1, 0.87.1-r2, 0.87.1-r3

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02326EPSS
SaveExploits6References66
OSV
OSV•added 2026/05/21 8:11 a.m.•305 views

CLEANSTART-2026-LG79681 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-mh2q-q3fh-2475 applied in versions: 0.87.1-r0, 0.89.0-r0, 0.89.0-r1

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02326EPSS
SaveExploits3References58
OSV
OSV•added 2026/05/21 8:11 a.m.•50 views

CLEANSTART-2026-OD56729 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-mh2q-q3fh-2475 applied in versions: 0.87.1-r0, 0.88.1-r0, 0.89.0-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02326EPSS
SaveExploits3References60
OSV
OSV•added 2026/05/21 8:10 a.m.•31 views

CLEANSTART-2026-CH40794 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 0.87.1-r0, 0.89.0-r0, 0.90.1-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02326EPSS
SaveExploits2References41
OSV
OSV•added 2026/05/21 8:09 a.m.•19 views

CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

9.8CVSS6.7AI score0.01625EPSS
SaveExploits3References51
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/05/21 12:00 a.m.•4 views

CVE-2026-45760: Externally Controlled Reference to a Resource in Another Sphere

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

8.1CVSS8AI score0.00386EPSS
SaveExploits0References3
Wolfi
Wolfi•added 2026/05/20 7:48 p.m.•27 views

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: argo-cd, argo-workflows, pulumi-language-dotnet, goreleaser, melange, wolfictl, trivy, argocd-image-updater, nfpm, gitea, pulumi-language-java, zarf, xeol, cerbos, gptscript, external-secrets-operator, scorecard, witness, gitaly, k9s, skaffold, apko, grafana-alloy,...

5.8AI score
SaveExploits0
Wolfi
Wolfi•added 2026/05/20 7:48 p.m.•27 views

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-workflows, pulumi-language-dotnet, goreleaser, melange, wolfictl, trivy, argocd-image-updater, nfpm, gitea, pulumi-language-java, zarf, xeol, cerbos, gptscript, external-secrets-operator, scorecard, witness, gitaly, k9s, skaffold, apko, grafana-alloy,...

5.8AI score
SaveExploits0
Wolfi
Wolfi•added 2026/05/20 7:48 p.m.•29 views

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-workflows, pulumi-language-dotnet, goreleaser, melange, wolfictl, trivy, argocd-image-updater, nfpm, gitea, pulumi-language-java, zarf, xeol, cerbos, gptscript, external-secrets-operator, scorecard, witness, gitaly, k9s, skaffold, apko, grafana-alloy,...

9.6CVSS8.3AI score0.00427EPSS
SaveExploits0
Wolfi
Wolfi•added 2026/05/20 7:48 p.m.•30 views

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-workflows, pulumi-language-dotnet, goreleaser, melange, wolfictl, trivy, argocd-image-updater, nfpm, gitea, pulumi-language-java, zarf, xeol, cerbos, gptscript, external-secrets-operator, scorecard, witness, gitaly, k9s, skaffold, apko, grafana-alloy,...

5.4CVSS5.7AI score0.0033EPSS
SaveExploits0
Chainguard
Chainguard•added 2026/05/20 7:17 p.m.•21 views

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gomplate, cloudbeat, terragrunt, coder, gomplate-fips, xeol-fips, grype, dagger, osv-scanner, chainloop-cli, nuclei, xeol, upwind-agent, pulumi-language-java, trufflehog, tfsec, kubescape-server, packer, mapotf, chainctl, gitaly-fips, skaffold, cerbos-fips, snyk-cli,...

5.8AI score
SaveExploits0
Chainguard
Chainguard•added 2026/05/20 7:17 p.m.•30 views

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: gomplate, cloudbeat, terragrunt, coder, gomplate-fips, xeol-fips, grype, dagger, osv-scanner, chainloop-cli, nuclei, xeol, upwind-agent, pulumi-language-java, trufflehog, tfsec, kubescape-server, packer, mapotf, chainctl, gitaly-fips, skaffold, cerbos-fips, snyk-cli,...

5.4CVSS5.7AI score0.0033EPSS
SaveExploits0
Chainguard
Chainguard•added 2026/05/20 7:17 p.m.•30 views

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: gomplate, cloudbeat, terragrunt, coder, gomplate-fips, xeol-fips, grype, dagger, osv-scanner, chainloop-cli, nuclei, xeol, upwind-agent, pulumi-language-java, trufflehog, tfsec, kubescape-server, packer, mapotf, chainctl, gitaly-fips, skaffold, cerbos-fips, snyk-cli,...

5.8AI score
SaveExploits0
OSV
OSV•added 2026/05/20 7:07 p.m.•30 views

GO-2026-4996 Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator

Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator...

4.3CVSS6.5AI score0.00369EPSS
SaveExploits0References8
Rows per page
Query Builder