GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

GHSA-P88M-4JFJ-68FV vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: pelias-api, renovate, haraka, kibana, actions-runner, prism, saf, vitess, node-gyp, npm, code-server, py3-captum, gemini-cli...

GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...

CVE-2026-41907 vulnerabilities

Vulnerabilities for packages: dbgate, jitsucom-jitsu, homepage, npm, kubeflow-katib, tensorflow-cpu-jupyter, nextcloud-server, renovate, dbgate-fips, kubeflow-pipelines, wazuh-dashboard-fips, drupal, gitlab-rails-ce-fips, langfuse, gemini-cli, wazuh-dashboard, opensearch-dashboards, argo-workflow...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, volume-modifier-for-k8s, victoriametrics, mountpoint-s3-csi-driver, dkron, flux, karpenter, newrelic-infra-operator, hubble, pluto, mariadb-operator, polaris, temporal, local-path-provisioner, omnibump, external-secrets-operator,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: pulumi, nsc, kine, cluster-autoscaler, osv-scanner, yunikorn-k8shim, openbao, controller-gen, clickhouse-operator, redka, s5cmd, xeol, helm, govulncheck, actions-runner-controller, aws-sigv4-proxy, harbor-scanner-trivy, k8ssandra-client, k8s-device-plugin,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: omni, gitea, k9s, kyverno-notation-aws, crossplane-provider-aws-sns, src-fingerprint, kubescape-server, terragrunt, crossplane-provider-aws-firehose, crossplane-provider-aws-rds, atlantis-fips, cerbos-fips, rancher-fleet-fips, argocd-image-updater, argo-cd,...

CVE-2026-25547 vulnerabilities

Vulnerabilities for packages: pulumi, renovate, actions-runner, lerna, node-gyp, drupal, librechat, sqlpad, npm...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: guac, nsc, restic, kine, glow, osv-scanner, openbao, redka, s5cmd, helm, rabbitmq-cluster-operator, govulncheck, actions-runner-controller, harbor-scanner-trivy, k8ssandra-client, k8s-device-plugin, pgpool2exporter, sops, aws-load-balancer-controller,...

EUVD-2022-6988

Malicious code in bioql PyPI...

EUVD-2025-27053

Malicious code in bioql PyPI...

EUVD-2022-49076

Malicious code in bioql PyPI...

Malicious code in actions-runner-admin (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...

MAL-2025-46892 Malicious code in actions-runner-admin (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...