GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, hey, ferretdb, restic, k6, aws-node-termination-handler, mesosphere-vsphere-csi, rancher-loglevel, http-echo, nats, certificate-transparency, terraform-provider-sendgrid, kpt, wgcf, helm-set-status, iptables-wrappers, maru,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

CVE-2025-12466

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

GO-2025-4075 Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server

Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server...

GHSA-JQMQ-FPWV-P925 Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

PT-2025-45738

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

PT-2025-45874

Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server...

CVE-2025-12466: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466

The Drupal Simple OAuth (OAuth2) & OpenID Connect module is vulnerable to an Authentication Bypass Using an Alternate Path or Channel (CWE-288). This flaw allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the system. The issue affects versions 6.0....

CVE-2025-12466 Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466 Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

Malicious Package

Overview dezcord.js is a malicious package. This is a "typosquatting" package, which means the package name is based on existing repositories, namespaces, or components, it aims to trick users to download the package which contains a malicious code. Payload behavior The malicious payload runs npm...