EUVD-2022-6703

Malicious code in bioql PyPI...

EUVD-2022-6779

Malicious code in bioql PyPI...

EUVD-2024-3341

Malicious code in bioql PyPI...

CVE-2025-59937 vulnerabilities

Vulnerabilities for packages: sftpgo, gitea...

GHSA-WPWJ-69CM-Q9C5 vulnerabilities

Vulnerabilities for packages: sftpgo, gitea...

CVE-2025-59937 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea, sftpgo...

GHSA-WPWJ-69CM-Q9C5 vulnerabilities

Vulnerabilities for packages: gitea-fips, gitea, sftpgo...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: grafana-operator, kube-vip, sftpgo-plugin-pubsub, newrelic-fluent-bit-output, ctop, linkerd2-proxy-init, pvc-autoresizer, addon-resizer, cloud-provider-aws, kube-vip-cloud-provider, checksec, container-object-storage-interface, kserve-rest-proxy, hivemind, vault-k8s,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: grafana-operator, kube-vip, sftpgo-plugin-pubsub, newrelic-fluent-bit-output, ctop, linkerd2-proxy-init, pvc-autoresizer, addon-resizer, cloud-provider-aws, kube-vip-cloud-provider, checksec, container-object-storage-interface, kserve-rest-proxy, hivemind, vault-k8s,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: grafana-operator, kserve-rest-proxy, confluent-common-docker, karpenter-fips, karma-fips, vault-k8s, sftpgo-plugin-geoipfilter, gostatsd, terraform-provider-tls-fips, prometheus-adapter, blob-csi-fips, nvidia-nsight-compute-12.8, local-path-provisioner,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: grafana-operator, kserve-rest-proxy, confluent-common-docker, karpenter-fips, karma-fips, vault-k8s, sftpgo-plugin-geoipfilter, gostatsd, terraform-provider-tls-fips, prometheus-adapter, blob-csi-fips, nvidia-nsight-compute-12.8, local-path-provisioner,...

CVE-2025-54799 vulnerabilities

Vulnerabilities for packages: sftpgo, terraform-provider-acme, traefik...

GHSA-Q82R-2J7M-9RV4 vulnerabilities

Vulnerabilities for packages: sftpgo, terraform-provider-acme, traefik...

CVE-2025-54799 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, traefik, sftpgo, terraform-provider-acme, traefik-fips...

GHSA-Q82R-2J7M-9RV4 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme-fips, traefik, sftpgo, terraform-provider-acme, traefik-fips...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: buf, step, karma, tkn, kyverno-policy-reporter-ui, step-ca, gogatekeeper, caddy, rclone, gitness, cloudflared, step-issuer, sftpgo...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: tkn, step, step-fips, dapr, tkn-fips, step-issuer-fips, rclone, gogatekeeper, cloudflared, gitness, step-ca-fips, kyverno-policy-reporter-ui-fips, sftpgo, dapr-fips, step-issuer, caddy, kyverno-policy-reporter-ui, rclone-fips, buf, caddy-fips, karma, telegraf, step-c...

CVE-2024-52309

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

CVE-2024-52801

sftpgo is a full-featured and highly configurable event-driven file transfer solution. Server protocols: SFTP, HTTP/S, FTP/S, WebDAV. The OpenID Connect implementation allows authenticated users to brute force session cookies and thereby gain access to other users' data, since the cookies are...

CVE-2024-37897

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. SFTPGo WebAdmin and WebClient support password reset. This feature is disabled in the default configuration. In SFTPGo versions prior to v2.6.1, if the feature is enable...