GO-2025-3987 vulnerabilities

Vulnerabilities for packages: hydra-fips, hydra, weaviate...

GO-2025-3742 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: cloudbeat, authentik-fips, authentik, rancher-agent, rancher, vault, vault-fips, cloudbeat-fips, azure-service-operator-fips, azure-service-operator...

GO-2024-3107 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, opentelemetry-collector-contrib-fips, kubeflow-pipelines, gosu-fips, helm-operator-fips, memcached-exporter, flux-notification-controller, yace, vault, neuvector-sigstore-interface-fips, step-issuer, tailscale, fulcio-fips, harbor-fips,...

GO-2026-5751 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: ko, trivy, docker-credential-gcr, kpt, undock, skopeo, amazon-cloudwatch-agent-operator, aws-otel-collector, nerdctl, spire-server, grafana, envoy-gateway, kots, rancher, trivy-operator, rancher-agent, podman, opentelemetry-operator, portieris, rancher-machine,...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: ko, opentelemetry-collector-contrib, wolfictl, trivy, docker-credential-gcr, kpt, opentelemetry-collector, buf, undock, newrelic-infrastructure-agent, skopeo, amazon-cloudwatch-agent-operator, aws-otel-collector, k8sgpt, nerdctl, spire-server, grafana,...

GO-2026-4980 vulnerabilities

Vulnerabilities for packages: juicefs, cloudnative-pg, argo-workflows, prometheus-operator, undock, gitlab-pages, tkn, grafana, authservice, zarf, aws-flb-firehose, prometheus, istio, knative-serving, spqr, flyte, libnvidia-container, mc, terraform-provider-acme, dagger, harbor, knative-eventing,...

GO-2026-4337 vulnerabilities

Vulnerabilities for packages: db-operator, crossplane-provider-aws-ec2, witness, s5cmd, node-problem-detector, buf, src-fingerprint, kubernetes-dashboard-metrics-scraper, tkn, k8sgpt-operator, kubernetes-replicator, fluxcd-kustomize-mutating-webhook, rancher-fleet, wuzz, libnvidia-container,...

CVE-2026-26974

Slyde is a program that creates animated presentations from XML. In versions 0.0.4 and below, Node.js automatically imports /.plugin.js,mjs files including those from nodemodules, so any malicious package with a .plugin.js file can execute arbitrary code when installed or required. All projects...

Exploit for Deserialization of Untrusted Data in Facebook React

Agentic Vulnerability Monitor POC An AI-powered, automated vu...

EUVD-2025-52295

Malicious code in resonant-amber-vole npm...

@ancademy/platform-sdk-client (>=1.1.1, <=1.1.4), @apollo/server-integration-testsuite (>=4.1.0, <=4.9.2) +31 more potentially affected by unknown CVE via @apollo/server (>=4.1.0, <=4.9.2)

@apollo/server NPM version =4.1.0, =1.1.1, =4.1.0, =0.0.1, =3.0.0-alpha.0, =3.0.0-alpha.0, =0.3.0-rc.0, =0.2.0, =0.1.0-alpha.6, =0.1.18, =0.1.17, =0.2.0, =0.1.17, =0.2.0, =0.2.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-J5G3-5C8R-7QFX...

Fedora 19 : lynis-1.3.6-1.fc19 (2013-22768)

1.3.6 2013-12-03 New : - Support for the dntpd time daemon - New Apache test for modules HTTP-6632 - Apache test for modevasive HTTP-6640 - Apache test for modqos HTTP-6641 - Apache test for modspamhaus HTTP-6642 - Apache test for ModSecurity HTTP-6643 - Check for installed package audit tool...