4062-1

Black Duck CoPilot Gradle/Travis CI Example Shows a working setup for using the Black Duck CoPilot integration to analyze the risk of project dependencies Travis CI Setup The .travis.yml file has been modified to upload generated dependency data to Black Duck CoPilot: aftersuccess: - bash curl -s...

CVE-2011-1475

CVE-2011-1475 Check dependency vulnerabilities using Maven on CVE-2011-1475 This project is to test Maven with Travis CI...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2026-69248 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2026-69249 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...

Travis CI Disclosure Detection

Travis CI is a Software as a Service SaaS based continuous integration service used to build and test software projects. By defining a configuration file named .travis.yml in their source code repositories, developers can customize their applications build workflows. !/usr/bin/env python3 --...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2023-50782 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...

no-cloud (0.0.8), nxviz (>=0.2.0, <=0.2.7) +4 more potentially affected by CVE-2023-50782 via cryptography (1.7.1)

cryptography PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - no-cloud 0.0.8 - nxviz =0.2.0, =0.7.0, =1.6.0, =2.1.1rc5, =0.3.3, =0.6.0 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-128...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2024-0727 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2024-0727 Source advisory: OSV:PYSEC-2026-1285...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2026-34073 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2026-34073 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2026-34073 Source advisory: OSV:GHSA-M959-CC7F-WV43...

no-cloud (0.0.8), nxviz (>=0.2.0, <=0.2.7) +4 more potentially affected by CVE-2026-26007 via cryptography (1.7.1)

cryptography PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - no-cloud 0.0.8 - nxviz =0.2.0, =0.7.0, =1.6.0, =2.1.1rc5, =0.3.3, =0.6.0 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-214...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2026-26007 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-41742

Malicious code in telegram-travis-api npm...

Malicious Package

Overview telegram-travis-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-50731 Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-9241

Malicious code in bioql PyPI...

EUVD-2021-28228

Malicious code in bioql PyPI...

osx-security-awesome

It is an offensive tool for collecting and categorizing OSX and iOS security resources. The primary CVE ID is not present in the provided context. The target product/service or framework is not explicitly stated, but the tool appears to be collecting resources related to OSX and iOS security. The...

CVE-2021-41077

The activation process in Travis CI, for certain 2021-09-03 through 2021-09-10 builds, causes secret data to have unexpected sharing that is not specified by the customer-controlled .travis.yml file. In particular, the desired behavior if .travis.yml has been created locally by a customer, and...