37482 matches found
BIT-AIRFLOW-2026-59244 Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UI
Apache Airflow's secrets masker did not mask var.json Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an isinstancestr guard — so a secret stored as a JSON Variable and referenced in a template via var.json was displayed in cleartext to any user with...
CVE-2026-50601
A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...
PT-2026-73238
Apache Airflow's secrets masker did not mask var.json Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an isinstancestr guard — so a secret stored as a JSON Variable and referenced in a template via var.json was displayed in cleartext to any user with...
Malicious code in svelte-goal-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad94557dcf8609bd1dbec00633fa3850e30f977d894850f983cf127bb05c1ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @peptideventure/peptide-score-modifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: net-kourier, kubernetes-dashboard-api, kitty, flux, victoriametrics-cluster, knative-serving, terraform-mcp-server, flux-source-controller, minio-object-browser, terraform-docs, rancher-telemetry, crossplane-provider-azure-sql, trufflehog, scorecard,...
CVE-2026-56862 vulnerabilities
Vulnerabilities for packages: net-kourier, kubernetes-dashboard-api, kitty, flux, victoriametrics-cluster, knative-serving, terraform-mcp-server, flux-source-controller, minio-object-browser, terraform-docs, rancher-telemetry, crossplane-provider-azure-sql, trufflehog, scorecard,...
CVE-2026-64887 Airwall - Hardcoded Secrets
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...
Malicious code in zip-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a990db9c306a25a8b0663088429ef5cf3939c32a9f8d6b1fc3066e8bf42a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hrp9872 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3863301b783d96a98f60f37331d4a61f921e6dee3c5c35f8788df21da5fd549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in google-logging-utils-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in saps_secplayground_npm_ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13fa9c8b7672d88eb66c92e717080df3e10efc1b6f881b2f7361af0a5a7fbb37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-22555
A flaw was found in Gitea. An API Application Programming Interface endpoint responsible for forking repositories into an organization failed to properly check if a user had the necessary permissions to create repositories within that organization. This allowed a read-only organization member to...
GO-2024-2982 vulnerabilities
Vulnerabilities for packages: vault...
GO-2023-1793 vulnerabilities
Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...
GO-2026-5723 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-5602 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...
GO-2026-5377 vulnerabilities
Vulnerabilities for packages: external-secrets-operator...