GO-2024-2899 vulnerabilities

Vulnerabilities for packages: melange, pombump...

GO-2026-5337 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, kyverno...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: teleport, rancher, dex, mattermost, rancher-agent...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: kots, tfsec, zot, trivy, kubescape, wolfictl, terraform, conftest, zarf, k9s, grype, terragrunt, snyk-cli, tflint...

GO-2024-3277 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

GO-2026-5235 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: kubewatch, protoc-gen-go-grpc, vexctl, cni-plugins, src-fingerprint, nodetaint, terraform, dockerize, gops, gh, mage, buildkitd, yq, kube-bench, kubernetes-event-exporter, kyverno-policy-reporter-kyverno-plugin, aws-flb-cloudwatch, render-template, cert-exporter,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: tfsec, external-secrets-operator, src-fingerprint, trufflehog, grafana-alloy, syft, act, terragrunt, trivy-operator, teleport, flux, skaffold, zot, dagger, pulumi-language-yaml, gitaly, gomplate, pulumi-language-dotnet, xeol, argo-workflows, nuclei, goreleaser,...

GO-2026-4871 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, kyverno-notation-aws, rancher-machine, cni-plugins, verticadb-operator, k8ssandra-client, opentelemetry-operator, terraform, terraform-provider-azapi, aws-s3-controller, spegel, renovate, kyverno-policy-reporter-kyverno-plugin, cert-exporter...

GO-2026-4762 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, rancher-machine, verticadb-operator, k8ssandra-client, tempo, opentelemetry-operator, terraform, terraform-provider-azapi, spegel, grafana-image-renderer, vault-secrets-webhook, cluster-api-aws-controller, podman, helm-operator, kapp-controller,...

GO-2025-3754 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws, vexctl, src-fingerprint, buildkitd, crossplane-provider-family-aws, aactl, crossplane-provider-azure, crossplane-provider-aws, atlantis, crossplane-provider-aws-memorydb, gomplate, pulumi-language-dotnet, terraform-provider-azurerm, goreleaser,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, cni-plugins, src-fingerprint, tempo, terraform, spegel, kyverno-policy-reporter-kyverno-plugin, ollama, cert-exporter, doppler-kubernetes-operator, nri-f5, stern, atlantis, helm-operator, dynamic-localpv-provisioner, gobuster, kaniko,...

GO-2024-2963 vulnerabilities

Vulnerabilities for packages: kafkaexporter, kubewatch, cni-plugins, src-fingerprint, tempo, terraform, spegel, kyverno-policy-reporter-kyverno-plugin, ollama, cert-exporter, doppler-kubernetes-operator, nri-f5, stern, atlantis, helm-operator, dynamic-localpv-provisioner, gobuster, kaniko,...

CVE-2026-73420 vulnerabilities

Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse...

CLEANSTART-2026-FH61032 Security fixes in metrics-server 0.8.1-r2

Package metrics-server version 0.8.1-r2 fixes 13 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-42154, ghsa-8rm2-7qqf-34qm...

DEBIAN-CVE-2026-68398

In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the L2TP UDP-encap softirq RX path: l2tpudpencaprecv - l2tprecvcommon - pppol2tprecv - pppinput&po-chan It runs under rcureadlock holding...

Malicious code in ventrix-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b68f964850d0777c1f3993c52e3b66dc425b02ee82fb33bcd958514f730926 [email protected] ships a loader that, when the package's default getPlugin export is invoked, performs an HTTP request to the hardcoded endpoint...

MAL-2026-11706 Malicious code in @or-sdk/library (npm)

npm/@or-sdk/library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

GHSA-8JC8-CVQJ-P926 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-cng-fips, gitlab-runner, gitlab-workhorse-ce, gitlab-runner-fips, gitlab-rails-ce, gitlab-cng, gitlab-workhorse-ce-fips...

MAL-2026-10901 Malicious code in solana-web3-lts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efd3d5cdcb8fb794a1702f586abd7018d86aad3e40286f5a43dd1127d804ed Package name 'solana-web3-lts' resembles the widely-used '@solana/web3.js' Solana SDK, raising name-confusion concerns for installers reaching for th...