GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

GHSA-P88M-4JFJ-68FV vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: vitess, renovate, gemini-cli, code-server, node-gyp, pelias-api, saf, haraka, prism, npm, actions-runner, kibana, py3-captum...

GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...

CVE-2026-41907 vulnerabilities

Vulnerabilities for packages: gemini-cli, wazuh-dashboard-fips, tensorflow-cpu-jupyter, code-server, saf, dbgate, homepage, kubeflow-pipelines, kibana, py3-jupyterlab, dbgate-fips, gitlab-rails-ce-fips, opensearch-dashboards, langfuse, actions-runner, gitlab-rails-ce, kubeflow-centraldashboard,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: spire-server, grafana-operator, github-mcp-server, aws-privateca-issuer, fluxcd-kustomize-mutating-webhook, actions-runner-controller, karpenter, aws-load-balancer-controller, rabbitmq-messaging-topology-operator, osv-scanner, newrelic-infra-operator, supercronic,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, golangci-lint, kube-bench, nsc, amazon-cloudwatch-agent-operator, cert-manager-cmctl, k3s, newrelic-k8s-metadata-injection, argo-workflows, trivy, pguser, nri-couchbase, task, crossplane-provider-sql, rancher-fleet,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-cd, trivy, xeol, cert-manager-cmctl, dagger, pulumi-kubernetes-operator, argo-workflows-fips, chainctl, gitlab-runner-fips, crossplane-provider-aws-cloudformation-fips, snyk-cli, boring-registry, crossplane-provider-aws-sqs-fips, gptscript, crossplane-fips,...

CVE-2026-25547 vulnerabilities

Vulnerabilities for packages: drupal, pulumi, renovate, node-gyp, sqlpad, librechat, npm, lerna, actions-runner...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-health-monitor, nri-jmx, kube-bench, nsc, sops, steampipe, op-geth, glow, k3s, newrelic-k8s-metadata-injection, ksops, pguser, nri-couchbase, task, rancher-fleet, nri-discovery-kubernetes, gitleaks, terraform-provider-time, kratos,...

EUVD-2022-6988

Malicious code in bioql PyPI...

EUVD-2025-27053

Malicious code in bioql PyPI...

EUVD-2022-49076

Malicious code in bioql PyPI...

Malicious code in actions-runner-admin (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...

MAL-2025-46892 Malicious code in actions-runner-admin (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...