44 matches found
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: renovate, saf, code-server, vitess, npm, pelias-api, py3-captum, gemini-cli, haraka, node-gyp, prism, kibana, actions-runner...
GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: renovate, librechat, sqlpad, gitlab-rails-ce-fips, kubeflow-pipelines, actions-runner, wazuh-dashboard, drupal, langfuse-fips, code-server, tensorflow-cpu-jupyter, opensearch-dashboards-fips, dbgate-fips, dbgate, nextcloud-server, kibana, kubeflow-centraldashboard,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, pluto, kubewatch, hubble, dataplaneapi, karpenter, newrelic-infra-operator, stakater-reloader, grafana-operator, smokescreen, flux-source-controller, supercronic, dkron, external-secrets-operator, github-mcp-server,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, neuvector-scanner, opensearch-k8s-operator, s5cmd, vertical-pod-autoscaler, gitlab-pages, nri-mysql, vault-benchmark, tigera-operator, stakater-reloader, k8sgpt-operator, timoni, cilium, smokescreen, flux-source-controller,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: argo-rollouts-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-kms, argocd-image-updater, chainctl, flux-helm-controller, flux-source-controller-fips, cerbos, goreleaser, omnictl-multiarch, openbao-fips, trivy, openbao, grafana-alloy, amazon-ssm-agent-fips,...
CVE-2026-25547 vulnerabilities
Vulnerabilities for packages: drupal, lerna, renovate, pulumi, npm, librechat, sqlpad, node-gyp, actions-runner...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: opensearch-k8s-operator, s5cmd, gitlab-pages, flannel-cni-plugin, nri-mysql, stakater-reloader, k8sgpt-operator, nsc, k8sgateway, pguser, tempo, gobump, gomplate, minio-operator, minio-object-browser, gitleaks, rclone, guac, k8s-device-plugin, kubeflow-pipelines, mod...
EUVD-2022-6988
Malicious code in bioql PyPI...
EUVD-2025-27053
Malicious code in bioql PyPI...
EUVD-2022-49076
Malicious code in bioql PyPI...
Malicious code in actions-runner-admin (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...
MAL-2025-46892 Malicious code in actions-runner-admin (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...