GO-2025-3987 vulnerabilities

Vulnerabilities for packages: weaviate, hydra, hydra-fips...

GO-2025-3742 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: cloudbeat, rancher-agent, authentik-fips, cloudbeat-fips, rancher, azure-service-operator-fips, authentik, vault-fips, vault, azure-service-operator...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy-fips, logstash-exporter, xcaddy, azcopy-fips, extism, haproxy-ingress, src, rancher-webhook, neuvector, crossplane-provider-aws-sns, cue-fips, flannel-cni-plugin, nvidia-gpu-operator-validator, sbomqs, cosign-fips, glab, cilium, vgpu-util,...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: spire-server, kots, nuclei, k8sgpt, skopeo, rancher-machine, podman, trivy, zot, ko, rancher, envoy-gateway, buildah, docker-credential-gcr, kpt, grafana, cri-tools, rancher-agent, datadog-agent, opentelemetry-operator, aws-otel-collector, portieris, trivy-operator,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: spire-server, openfga, splunk-otel-collector, neuvector-scanner, kots, nuclei, k8sgpt, apko, skopeo, opentelemetry-collector, rancher-machine, podman, melange, trivy, wolfictl, osv-scanner, cluster-api, ko, zot, rancher, pulumi, goreleaser, envoy-gateway, buildah,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: go, kubevela, cloud-sql-proxy, dask-gateway, grafana-alloy, apko, buildkitd, zot, aws-flb-firehose, prometheus, argo-workflows, tetragon, goreleaser, telegraf, step-ca, gatekeeper, cilium-cli, thanos, aactl, prometheus-pushgateway, trino, libnvidia-container, redpand...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: kube-bench, nri-kafka, rancher-helm, haproxy-ingress, nri-haproxy, caddy, metrics-agent, dkron, crossplane-provider-keycloak, jaeger-operator, helm-mapkubeapis, newrelic-infra-operator, fscrypt, chart-testing, aws-flb-firehose, tailscale, knative-client, chezmoi,...

CVE-2026-26974

Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically imports /.plugin.js,mjs files including those from nodemodules, so any malicious package with a .plugin.js file can execute arbitrary code when installed or required. All projects...

Exploit for Deserialization of Untrusted Data in Facebook React

Agentic Vulnerability Monitor POC An AI-powered, automated vu...

EUVD-2025-52295

Malicious code in resonant-amber-vole npm...

@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)

@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

Fedora 19 : lynis-1.3.6-1.fc19 (2013-22768)

1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...