Malicious Package

Overview opensearch-config-utility is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...

Malicious Package

Overview search-engine-setup is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, chartmuseum-fips, nerdctl, caddy, helm, gitaly-fips, aws-flb-cloudwatch-fips, ingress-nginx-controller, rancher-helm, net-kourier-fips, vault-fips, neuvector-scanner-fips, jaeger, kube-arangodb, docker-cli-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, chartmuseum-fips, nerdctl, caddy, helm, gitaly-fips, aws-flb-cloudwatch-fips, ingress-nginx-controller, rancher-helm, net-kourier-fips, vault-fips, neuvector-scanner-fips, jaeger, kube-arangodb, docker-cli-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, longhorn-instance-manager, onepassword-operator, crossplane-provider-family-aws-fips, chartmuseum-fips, docker-credential-acr-env-fips, aws-otel-collector-fips, apache-exporter, nerdctl, whereabouts-fips, authservice,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent-fips, longhorn-instance-manager, onepassword-operator, crossplane-provider-family-aws-fips, chartmuseum-fips, docker-credential-acr-env-fips, aws-otel-collector-fips, apache-exporter, nerdctl, whereabouts-fips, authservice,...

CVE-2026-32692

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization when saving credentials. An authenticated user can access plaintext values of secrets stored in external vaults by referencing a secret's external name in a credential, bypassing intended permission checks. Note:...

GO-2026-4781 Juju has unauthorized update of out-of-scope Vault secrets in github.com/juju/juju

Juju has unauthorized update of out-of-scope Vault secrets in github.com/juju/juju...

EUVD-2026-12817

Juju has unauthorized update of out-of-scope Vault secrets...

CVE-2026-32692 Unauthorized update of out-of-scope Vault secrets

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within...

CVE-2026-32692 Unauthorized update of out-of-scope Vault secrets

An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within...

CVE-2026-32692

The CVE-2026-32692 entry describes an authorization bypass in the Vault secrets back-end of Juju (versions 3.1.6–3.6.18). An authenticated unit agent can perform unauthorized updates to secret revisions, potentially poisoning existing secret revisions within the Vault secret back-end. Metrics ind...

EUVD-2022-6511

Malicious code in bioql PyPI...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache-fips, longhorn-instance-manager, skaffold, aws-otel-collector-fips, apache-exporter, nerdctl, peerdb-flow, authservice, rancher-loglevel, caddy, ksops, mongo-tools, helm, kubernetes-csi-driver-hostpath, falco-exporter-fips,...

GO-2022-0980 Exposure of Vault secrets via error messages in github.com/hashicorp/consul-template

The text of errors returned by Template.Execute can contain Vault secrets, potentially revealing these secrets in logs or error reports...

CVE-2022-38149

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2...

Design/Logic Flaw

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2...

CVE-2022-38149

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2...

PT-2022-24241 · Hashicorp · Hashicorp Consul Template

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul Template versions 0.27.2 and earlier, 0.28.2 and earlier, 0.29.1 and earlier Description: The issue concerns the potential exposure of Vault secrets in error messages returned by the template.Template.Execute method when a...