171 matches found
grype v0.118.0
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...
dependency-track v5.0.5
OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...
gitgalaxy — Updated!
GitGalaxy Docs · Visualizer 1 scan · 97 structural signals · 50+ languages · 0 need for compilation 19 risk exposure scores · 6 final reports · 0 dependencies · pip install gitgalaxy What Pain Point Does This Solve? GitGalaxy exists for one recurring problem: understanding a large, real,...
retire.js v5.5.0
Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: kine, docker-credential-ecr-login, falcosidekick, kube-rbac-proxy, whereabouts, rancher-webhook, kubernetes-replicator, hubble, crossplane-provider-aws-cloudformation, runc, rancher-agent, harbor-registry, s5cmd, spark-operator, helm-mapkubeapis, falco-no-driver,...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: kine, docker-credential-ecr-login, falcosidekick, kubernetes-csi-node-driver-registrar, victoriametrics, kube-rbac-proxy, whereabouts, rancher-webhook, kubernetes-replicator, crane, chisel, hubble, pguser, crossplane-provider-aws-cloudformation, runc, rancher-agent,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: cfssl, docker-credential-ecr-login, kine, falcosidekick, kubernetes-csi-node-driver-registrar, victoriametrics, kube-rbac-proxy, whereabouts, rancher-webhook, kubernetes-replicator, crane, chisel, hubble, pguser, crossplane-provider-aws-cloudformation, runc,...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: trivy-fips, conftest, kyverno, kots, kyverno-notation-aws, dapr-fips, cosign-fips, kyverno-fips, dapr, policy-controller, conftest-fips, cosign, kyverno-notation-aws-fips, policy-controller-fips, trivy, tfsec, spire-server-fips, witness, spire-server...
GO-2024-2920 vulnerabilities
Vulnerabilities for packages: melange, zot, guac, dagger...
GO-2026-5547 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, cosign, tflint, teleport, docker, skaffold, zot, ko, slsa-verifier, policy-controller, spire-server, falcoctl, ratify, bom, flux-source-controller, kyverno-notation-aws, kyverno, gitsign, trivy, zarf, docker-compose, goreleaser, gh, kubescape,...
CLEANSTART-2026-NA71469 Security fixes in syft 1.43.0-r1
Package syft version 1.43.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...
grype v0.117.0
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...
gitgalaxy — Updated!
GitGalaxy Docs · Visualizer 1 scan · 97 structural signals · 50+ languages · 0 need for compilation 19 risk exposure scores · 6 final reports · 0 dependencies · pip install gitgalaxy What Pain Point Does This Solve? GitGalaxy exists for one recurring problem: understanding a large, real,...
gitgalaxy — Updated!
GitGalaxy Docs · Visualizer 1 scan · 97 structural signals · 50+ languages · 0 need for compilation 19 risk exposure scores · 6 final reports · 0 dependencies · pip install gitgalaxy What Pain Point Does This Solve? GitGalaxy exists for one recurring problem: understanding a large, real,...
dependency-track v5.0.4
OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...
CVE-2026-18353 Unauthenticated SSRF in PIA via OIDC issuer allowlist bypass
PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...
CVE-2026-18353
PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...
EUVD-2026-51066
PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...
CVE-2026-18353: Server-Side Request Forgery (SSRF)
PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...
grype v0.116.1
Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...