664 matches found
osv-scanner
Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...
depx
depx Malicious package & supply-chain intelligence Features • Installation • Usage • Running depx • JSON • Join Discord depx is a fast, passive supply-chain intelligence CLI. It tells you whether a package is known malicious hijacked publishes, credential stealers, install-script backdoors by...
pyscan
Pyscan Pyscan is a highly concurrent vulnerability scanner written in Rust. It automatically traverses your Python project, extracts dependencies across various packaging formats, and cross-references them against the Open Source Vulnerabilities OSV database in a single asynchronous batch request...
deptrust
deptrust root@kitploit: / / / / / / / / / / / / / / / / / / / // / / // / / // / ,// ./// ,/// // deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub...
bomber
bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...
async-http-client-check
async-http-client-check Offline checker for the 21 repository-level security advisories oforg.asynchttpclient:async-http-client AsyncHttpClient, "AHC". It tells you which ones your jar is actually exposed to, flags the ones Dependabot and OSV cannot see , and gives one answer per line: 3.0.13 3.x...
google-poc
To reporoduce the CVE-2025-13425 just follow the steps below: Step 1: Clone the fresh osv-scalibr source code: root@kitploit: $ git clone https://github.com/google/osv-scalibr Step 2: Remove the code mentioned in fix commit...
cve-lite-on-pi
cve-lite-on-pi A short write-up of running CVE Lite CLI against the pi monorepo, and what it found. Background This experiment was prompted by the article "OWASP CVE Lite CLI – New Tool to Scan for Vulnerabilities in Your Projects" CyberSecurityNews. What is CVE Lite CLI? CVE Lite CLI is a...
CTWall
CTWall - ChainThreatWall GitHub release --- As more teams move to virtualized development environments to reduce software supply-chain risk, one challenge remains: malicious dependencies can still slip through and reach production. CTWall ChainThreatWall platform helps Security, DevOps, and Produ...
MINI-FPHH-PH7J-7JX4
Bulletin has no description...
@aliceo2/infologger (1.14.0), @azimutt/connector-mariadb (>=0.1.0, <=0.1.9) +7 more potentially affected by CVE-2026-55215 via mariadb (>=3.3.0, <=3.3.2)
mariadb NPM version =3.3.0, =0.1.0, =0.1.0, =6.1.13-dev.2, =1.0.0, =0.1.0, =0.1.39 - nodefony 7.0.0 Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...
kas (>=0.3.0, <=0.10.1), kas-core (>=0.10.0, <=0.10.1) +3 more potentially affected by unknown CVE via stack_dst (0.6.1)
stackdst CARGO version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on stackdst and may be impacted: - kas =0.3.0, =0.10.0, =0.3.0, =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0272...
@142vip/egg (>=0.0.1-alpha.1, <=0.0.1-alpha.6), @142vip/egg-axios (>=0.0.1-alpha.1, <=0.0.1-alpha.2) +1619 more potentially affected by CVE-2026-55553 via urllib (>=3.1.2, <=4.9.0)
urllib NPM version =3.1.2, =0.0.1-alpha.1, =0.0.1-alpha.1, =0.0.1-alpha.2, =0.0.1-alpha.2, =2.6.4, =1.7.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.0.15, =1.2.17 and more Source cves: CVE-2026-55553 Source advisory: OSV:GHSA-HQ3H-G68C-HP78...
GO-2026-4569 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, opencost-fips, jaeger-fips, gptscript, opencost, jaeger, ferretdb, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, github-mcp-server, osv-scanner, flux-operator-fips, datadog-agent, flux-operator...
GO-2026-4770 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, opencost-fips, jaeger-fips, opencost, glab, jaeger, ferretdb, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, livekit-cli, osv-scanner, flux-operator-fips, datadog-agent, flux-operator...
GO-2026-4858 vulnerabilities
Vulnerabilities for packages: cloudbeat-fips, docker-compose-fips, cloudbeat, trivy-fips, guac, podman-fips, trivy-operator, buildah-fips, livekit-cli, osv-scanner, docker-cli-buildx, buildah, conftest, docker-fips, kubescape-server-fips, scorecard, kubescape, podman, kubescape-server,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: kubevela-fips, flux-image-automation-controller-fips, witness, dagger, kargo, nfpm, packer-fips, cerbos-fips, gomplate-fips, grafana, steampipe, gomplate, rancher-fleet, k9s, scorecard, gitea, k9s-fips, teleport, argocd-image-updater, amazon-ssm-agent, grype,...
GO-2025-4098 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler, dagger, blob-csi, kubernetes-csi-driver-nfs, prometheus-node-exporter-fips, newrelic-infrastructure-agent, rke2-runtime, undock, virt-handler-fips, prometheus-podman-exporter-fips, k3s, volcano, longhorn-share-manager, prometheus-node-exporter,...
