GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: conftest, podman, scorecard, kubescape, guac, kaniko...

SecureAI-Scan v0.10.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

CVE-2026-63328 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write

Trivy is a security scanner. Prior to 0.72.0, plugin manifest metadata is used by pkg/plugin/manager.go to construct paths under /.trivy/plugins without confining plugin names to that root, allowing an attacker who persuades a user to install or run a malicious plugin to write the manifest and...

Linux Distros Unpatched Vulnerability : CVE-2026-68466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DMA completion callback but ignores waitforcompletiontimeout. A...

CVE-2026-74243

In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...

GO-2026-4509 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: nuclei, commercial-expanso-edge...

GO-2025-3638 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: opencost, ferretdb, gitlab-workhorse-ce, osv-scanner, opencost-fips, jaeger-fips, gitlab-workhorse-ce-fips, flux-operator-fips, datadog-agent-fips, jaeger, datadog-agent, livekit-cli, flux-operator, glab...

GO-2025-3638 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2026-4509 vulnerabilities

Vulnerabilities for packages: nuclei...

PT-2026-72129

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists when the SECURITY SCANNER V4 PSK pre-shared key is not configured. A remote unauthenticated attacker can send POST requests to the security scanner notification endpoint,...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182---Advanced-React-Server-Components-RCE-Exploit...

SecureAI-Scan v0.8.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

SecureAI-Scan v0.7.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

SecureAI-Scan v0.6.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

SecureAI-Scan v0.4.1

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

PYSEC-2026-1788 Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

Details There's a parsing logic error in picklescan and modelscan while trying to deal with opcode STACKGLOBAL. Function listglobals when handling STACKGLOBAL at position n, it is expected to track two arguments but in wrong range. The loop only consider the range from 1 to n-1 but forgets to...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the numpy.f2py.crackfortran process. An attacker can execute arbitrary code by crafting malicious pickle...

Linux Distros Unpatched Vulnerability : CVE-2026-14604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file...