89 matches found
checkov
Checkov 是一个用于基础设施即代码（IaC）的静态代码分析工具，同时也是用于镜像和开源包的软件组成分析（SCA）工具。 它扫描使用 Terraform、Terraform 计划、Cloudformation、AWS SAM、Kubernetes、Helm charts、Kustomize、Dockerfile、Serverless、Bicep、OpenAPI、ARM 模板 或 OpenTofu 配置的云基础设施，并使用基于图的扫描检测安全与合规配置错误。 它执行 软件组成分析（SCA）扫描，即对开源包和镜像进行常见漏洞与暴露（CVE）扫描。 Checkov 还为 Prisma...
k8s-cve-2020-8554-mitigations
Prisma Cloud Compute Mitigations for Kubernetes CVE-2020-8554 This repository contains Prisma Cloud Compute Admission rules that mitigate exploitation of CVE-2020-8554, an unpatched Kubernetes vulnerability. To ensure correct usage, please follow the instructions provided in the 'Prisma Cloud...
CVE-2026-0303
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...
CVE-2026-0302
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
CVE-2026-0302
CVE-2026-0302 is currently a reserved candidate with no public technical details available in the provided documents. Monitor for updates once the reserving organization publishes further information.
EUVD-2026-75270
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...
CVE-2026-0303
CVE-2026-0303 is currently reserved with no public technical details available. The affected product, root cause, and impact are not yet disclosed. Monitor for updates when the holder publicizes the vulnerability.
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file. Work around: Until a fixed version is deployed, avoid running Checkov over untrusted content, an...
checkov v3.3.16
Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...
EUVD-2021-26395
Malware in sbrugna...
EUVD-2021-26392
Malware in sbrugna...
EUVD-2021-26387
Malware in sbrugna...
EUVD-2021-26385
Malware in sbrugna...
EUVD-2021-26391
Malware in sbrugna...
EUVD-2025-14901
Malicious code in bioql PyPI...
EUVD-2025-24618
Malicious code in bioql PyPI...