20656 matches found
GO-2025-3433 Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd
Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd...
GO-2025-3435 Kubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller
Kubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller...
Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access
Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of granting the adversary remote access to infected systems. The package, named github.com/boltdb-go/bolt, is a typosquat of the legitimate BoltDB...
BIT-MLFLOW-2024-1593 Path Traversal via Parameter Smuggling in mlflow/mlflow
A path traversal vulnerability exists in the mlflow/mlflow repository due to improper handling of URL parameters. By smuggling path traversal sequences using the ';' character in URLs, attackers can manipulate the 'params' portion of the URL to gain unauthorized access to files or directories. Th...
MAL-2025-896 Malicious code in Мircosоft.ЕntitуFramеworkСоrе (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-992 Malicious code in tan1 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-984 Malicious code in shinel (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-924 Malicious code in fgh (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-898 Malicious code in account-eth (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-890 Malicious code in xapi_test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-884 Malicious code in worqhat-tracker (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-875 Malicious code in test-for-confirm-paths (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-870 Malicious code in stale-action (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-866 Malicious code in security_solution (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-862 Malicious code in proton-shared (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-850 Malicious code in micrometer-docs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-849 Malicious code in matlab-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d1c9f8fc2ac7b79ac71f982d63975187f10208bf2e827f0797a38e8e629a16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-839 Malicious code in ig-phantomjs-binaries (npm)
--- -= Per source details. Do not edit below this line.=-...