vet

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: buildah, buildah-fips, gpu-operator, gpu-operator-fips, k8s-device-plugin-fips, rancher, falco-no-driver, cadvisor, nvidia-container-toolkit, node-feature-discovery, prometheus-podman-exporter-fips, rancher-agent, sriov-network-device-plugin, cadvisor-fips,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: buildah, opentelemetry-operator, buildah-fips, ko-fips, nerdctl, rancher-machine, skopeo, nerdctl-fips, datadog-agent, harvester, grafana, trivy-fips, beats-fips, harvester-fips, rancher, zot, nrdot-collector-k8s-fips, undock, docker-credential-gcr-fips, envoy-gatewa...

GO-2024-2824 vulnerabilities

Vulnerabilities for packages: prometheus-statsd-exporter-fips, k9s, ko-fips, skopeo, kustomize, kube-state-metrics, tekton-chains, kube-state-metrics-fips, rclone, mods, prometheus-postgres-exporter, secrets-store-csi-driver-provider-gcp, aws-efs-csi-driver, cass-operator-fips, caddy-fips,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: telegraf, delve, rancher-agent, kubernetes, vault-k8s, datadog-agent, redka, tailscale, atlantis, envoy-gateway, git-credential-oauth, hey, prometheus, renovate, blobfuse2, fuse-overlayfs-snapshotter, spire-server, argo-cd, container-object-storage-interface,...

GO-2026-5020 vulnerabilities

Vulnerabilities for packages: gitea, hcloud, crossplane-provider-aws-elasticache, datadog-agent, crossplane-provider-aws-sns, nerdctl, ko, cilium, kubescape, opentelemetry-collector, kaf, crossplane-provider-aws-route53, flux-notification-controller, crossplane-provider-aws-rds, chezmoi, cosign,...

GO-2026-4870 vulnerabilities

Vulnerabilities for packages: hcloud, aws-node-termination-handler, maru, nerdctl, redis-operator, clickhouse-operator, frp, chezmoi, oras, victoriametrics, filebrowser, slsa-verifier, task, crossplane-provider-family-azure, gcsfuse, wal-g, nri-mssql, db-operator, mongo-tools,...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Checker A portable Bash script to detect vulne...

Linux Distros Unpatched Vulnerability : CVE-2024-1724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict writes to the $HOME/bin path. In Ubuntu,...

Linux Distros Unpatched Vulnerability : CVE-2010-3836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server cra...

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

The npm registry for the Node.js JavaScript runtime environment is susceptible to what's called a manifest confusion attack that could potentially allow threat actors to conceal malware in project dependencies or perform arbitrary script execution during installation. "A npm package's manifest is...

RHEL 7 : rh-nodejs10-nodejs (RHSA-2020:0597)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0597 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

Impact Running GuardDog against a specially-crafted package can allow an attacker to write an arbitrary file on the machine where GuardDog is executed. This is due to a path traversal vulnerability when extracting the .tar.gz file of the package being scanned, which exists by design in the...

Salt Open Linux Vulnerability Scanner: Salt Scanner

Salt Open Linux Vulnerability Scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications. Requirements Salt Open salt-master, salt-minion¹ Python 2.7 Salt pip install salt==2016.11.5 Slackclient pip install slackclient==1.0.5 Usage root@localhost pyth...