47 matches found
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: nri-elasticsearch, runc, crossplane-provider-aws-elasticache, terraform-provider-acme, cluster-proportional-autoscaler, kyverno, cis-operator, continuity, kaniko, dask-gateway, kapp-controller, spark-operator, kube-vip, crossplane-provider-aws-memorydb, goreleaser,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: cosign, runc, crossplane-provider-aws-elasticache, go-licenses, http-echo, kapp-controller, kubernetes-dns-node-cache, dask-gateway, rancher-loglevel, spark-operator, sftpgo-plugin-kms, gatekeeper, goreleaser, kubeflow, minio-operator, kserve-modelmesh-serving,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: cosign, flux-source-controller, bank-vaults, goreleaser, flux-image-automation-controller, crossplane-provider-family-azure, rabbitmq-messaging-topology-operator, src-fingerprint, guac, rook, kargo, k3s, rekor, opentelemetry-collector-contrib, policy-controller, zot,...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: prism, renovate, code-server, py3-captum, pelias-api, haraka, npm, gemini-cli, vitess, node-gyp, saf, kibana, actions-runner...
GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: py3-captum, argo-workflows, tensorflow-cpu-jupyter, kubeflow-centraldashboard, langfuse-fips, nextcloud-server, npm, opensearch-dashboards, gemini-cli, gitlab-rails-ce-fips, saf, prism, renovate, wazuh-dashboard, jitsucom-jitsu, redisinsight, kubeflow-katib, nemo,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: dataplaneapi, dbmate, clickhouse-operator, flux-source-controller, ingress-nginx-controller, go, oras, newrelic-k8s-metadata-injection, goreleaser, hubble, flux-image-automation-controller, smarter-device-manager, apko, rabbitmq-messaging-topology-operator, karpenter...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: runc, spark-operator, kube-vip, kubeflow, apko, rabbitmq-messaging-topology-operator, gitlab-pages, pdfcpu, policy-controller, temporal-ui-server, kubescape-operator, terraform-provider-tls, controller-gen, kapp, rancher-fleet, malcontent,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: kyverno-fips, cg, trivy, zot, argo-events-fips, hydra-fips, flux-kustomize-controller, crossplane-provider-azure-managedidentity, docker, omnictl-multiarch-fips, gitlab-operator, crossplane-provider-aws-dynamodb, kyverno-notation-aws-fips, scorecard,...
CVE-2026-25547 vulnerabilities
Vulnerabilities for packages: renovate, sqlpad, npm, pulumi, librechat, lerna, node-gyp, drupal, actions-runner...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: runc, spark-operator, sftpgo-plugin-kms, kube-vip, kubeflow, rabbitmq-messaging-topology-operator, kube-vip-cloud-provider, src-fingerprint, gitlab-pages, pdfcpu, policy-controller, temporal-ui-server, terraform-provider-tls, kapp, rancher-fleet,...
