GO-2025-3987 vulnerabilities

Vulnerabilities for packages: hydra-fips, hydra, weaviate...

GO-2025-3742 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: rancher, cloudbeat, authentik, vault, cloudbeat-fips, azure-service-operator-fips, vault-fips, rancher-agent, azure-service-operator, authentik-fips...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, vgpu-util, terraform-provider-azurerm, flux-source-controller-fips, crossplane-provider-aws-sns, protoc-gen-go, fluent-operator, crossplane-provider-aws-cloudwatchlogs, dataplaneapi-fips, trillian, velero-fips, wave-fips,...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: buildah, spire-server, undock, rancher-agent, ko, envoy-gateway, opentelemetry-operator, zot, rancher-machine, trivy-operator, grafana, amazon-cloudwatch-agent-operator, nuclei, docker-credential-gcr, aws-otel-collector, trivy, podman, rancher, skopeo, kots, nerdctl,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: buildah, spire-server, docker, osv-scanner, splunk-otel-collector, wolfictl, openfga, undock, rancher-agent, gatekeeper, neuvector-scanner, zarf, opentelemetry-collector-contrib, goreleaser, ko, pulumi, envoy-gateway, apko, opentelemetry-operator, zot, rancher-machin...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: buildah, tetragon, vault-secrets-webhook, cloud-sql-proxy, trino, cloud-provider-azure, zarf, kubo, argo-cd, fluent-bit-plugin-loki, kyverno, falco-no-driver, step-ca, vault-benchmark, minio-object-browser, authservice, terraform-provider-tls, sftpgo-plugin-eventstor...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, nfs-subdir-external-provisioner, tetragon, vault-secrets-webhook, vault-env, rancher-telemetry, mongodb-kubernetes-operator, kubernetes-csi-livenessprobe, sftpgo-plugin-eventsearch, step-ca, crossplane-provider-family-aws, falco-no-driver,...

CVE-2026-26974

Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically imports /.plugin.js,mjs files including those from nodemodules, so any malicious package with a .plugin.js file can execute arbitrary code when installed or required. All projects...

Exploit for Deserialization of Untrusted Data in Facebook React

Agentic Vulnerability Monitor POC An AI-powered, automated vu...

EUVD-2025-52295

Malicious code in resonant-amber-vole npm...

Fedora 19 : lynis-1.3.6-1.fc19 (2013-22768)

1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...