GHSA-C3FC-8QFF-9HWX vulnerabilities

Vulnerabilities for packages: gradle, jruby, thingsboard, apache-nifi-registry, logstash, apache-pulsar, jenkins, ruby3.2-bouncy-castle-java, wildfly, ruby3.4-bouncy-castle-java, apache-nifi, ruby4.0-bouncy-castle-java, kserve-modelmesh, spark, ruby3.3-bouncy-castle-java, zipkin, keycloak, druid,...

CVE-2026-0636 vulnerabilities

Vulnerabilities for packages: gradle, jruby, thingsboard, apache-nifi-registry, logstash, apache-pulsar, jenkins, ruby3.2-bouncy-castle-java, wildfly, ruby3.4-bouncy-castle-java, apache-nifi, ruby4.0-bouncy-castle-java, kserve-modelmesh, spark, ruby3.3-bouncy-castle-java, zipkin, keycloak, druid,...

CVE-2026-3505 vulnerabilities

Vulnerabilities for packages: gradle, wildfly, apache-nifi-registry, apache-nifi, jenkins...

GHSA-CJ8J-37RH-8475 vulnerabilities

Vulnerabilities for packages: gradle, wildfly, apache-nifi-registry, apache-nifi, jenkins...

GHSA-CJ8J-37RH-8475 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, wildfly, jenkins, apache-nifi, gradle...

CVE-2026-3505 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, wildfly, jenkins, apache-nifi, gradle...

GHSA-WG6Q-6289-32HP vulnerabilities

Vulnerabilities for packages: jruby, thingsboard, wildfly, apache-nifi-registry, zipkin, apache-nifi, logstash, kserve-modelmesh, keycloak, apache-pulsar, druid, sonarqube, jenkins...

CVE-2026-5588 vulnerabilities

Vulnerabilities for packages: jruby, thingsboard, wildfly, apache-nifi-registry, zipkin, apache-nifi, logstash, kserve-modelmesh, keycloak, apache-pulsar, druid, sonarqube, jenkins...

Malicious Package

Overview @than1st/baileys is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview node-red-contrib-yolo-object-detection is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...

Malicious Package

Overview koa-v3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in genosys (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2fb27cde30ea3d834e3160e37c203a1f8a271435cf92316a990766c5b8b9791c The campaign is built from a benign-like package e.g. genosys and the malicious dependency e.g. pynosist. The dependency uses a PTH file to trigger malicious...

Critical: Red Hat Security Advisory: Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

A new satellite/iop-vulnerability-frontend-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed package...

Microsoft Windows Server Domain Role Detection

SMB-login based domain role detection with powershell fallback for Windows Server. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Malicious Package

Overview tensorzero-node is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview vs-supplier-portal-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview base-counter-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview fusion-events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview com.baogong.apppushpermission is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview cw-isdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...