1013 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-3917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cau...
Linux Distros Unpatched Vulnerability : CVE-2021-39895
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project export so when an unsuspecting owner...
Linux Distros Unpatched Vulnerability : CVE-2022-3759
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 before 15.7.6, all version...
Linux Distros Unpatched Vulnerability : CVE-2021-22181
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust...
GHSA-4VQ8-7JFC-9CVP vulnerabilities
Vulnerabilities for packages: docker-credential-gcr-fips, kubeflow-katib, kyverno, amazon-ecs-agent-fips, aactl, bento, harbor-scanner-trivy-fips, cluster-api-fips, openbao-fips, skaffold, vault, gatekeeper, harbor, harbor-scanner-trivy, opentelemetry-operator, harvester-fips, traefik-fips,...
CVE-2025-54410 vulnerabilities
Vulnerabilities for packages: docker-credential-gcr-fips, kubeflow-katib, kyverno, amazon-ecs-agent-fips, aactl, bento, harbor-scanner-trivy-fips, cluster-api-fips, openbao-fips, skaffold, vault, gatekeeper, harbor, harbor-scanner-trivy, opentelemetry-operator, harvester-fips, traefik-fips,...
Malicious code in screwdriver-plugin-pipelines (npm)
The package screwdriver-plugin-pipelines was found to contain malicious code...
Malicious code in com.unity.render-pipelines.core (npm)
The package com.unity.render-pipelines.core was found to contain malicious code...
MAL-2025-17361 Malicious code in com.unity.render-pipelines.core (npm)
The package com.unity.render-pipelines.core was found to contain malicious code...
MAL-2025-32828 Malicious code in screwdriver-plugin-pipelines (npm)
The package screwdriver-plugin-pipelines was found to contain malicious code...
MAL-2025-17362 Malicious code in com.unity.render-pipelines.universal (npm)
The package com.unity.render-pipelines.universal was found to contain malicious code...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.19.0
The 1.19.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.19.0 release of Red Hat OpenShift Pipelines Operator...
Malicious code in azure-pipelines (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3befea97b94282d8ce4388e647f5f86caea89c7727ce5f913eb233b357335d0f Any computer that has this package installed or running should be considered...
MAL-2025-5180 Malicious code in azure-pipelines (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3befea97b94282d8ce4388e647f5f86caea89c7727ce5f913eb233b357335d0f Any computer that has this package installed or running should be considered...
The New Frontline: Why DevOps Became a Cyber Target
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Your developers didn't become...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.17.2
The 1.17.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.17.2 release of Red Hat OpenShift Pipelines Operator...
CVE-2025-49598 conda-forge-ci-setup Allows Arbitrary Code Execution via Insecure Version Parsing
conda-forge-ci-setup is a package installed by conda-forge each time a build is run on CI. The conda-forge-ci-setup-feedstock setup script is vulnerable due to the unsafe use of the eval function when parsing version information from a custom-formatted meta.yaml file. An attacker controlling...
AI Agents Run on Secret Accounts — Learn How to Secure Them in This Webinar
AI is changing everything — from how we code, to how we sell, to how we secure. But while most conversations focus on what AI can do, this one focuses on what AI can break — if you're not paying attention. Behind every AI agent, chatbot, or automation script lies a growing number of non-human...
