47 matches found
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, cloud-sql-proxy, nova, local-path-provisioner, vault-k8s, zarf, paranoia, rekor, temporal-ui-server, containerd, crossplane-provider-family-azure, glab, falco-no-driver, libnvidia-container,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, grpcurl, ferretdb, crossplane-provider-aws-iam, fluxcd-kustomize-mutating-webhook, spire-controller-manager, gitleaks, nri-mongodb, local-path-provisioner, vault-k8s, paranoia, timescaledb-parallel-copy, crossplane-provider-sql,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, opentelemetry-collector, flux-kustomize-controller, terragrunt, policy-controller, skopeo, tkn, aactl, crossplane-provider-azure-authorization, snyk-cli, scorecard, sigstore-scaffolding, zarf, tekton-chains, rekor, zot, ksops,...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, librechat, kubeflow-pipelines, kubeflow-centraldashboard, py3-jupyterlab, azurite, homepage, prism, wazuh-dashboard, code-server, nextcloud-server, argo-workflows, redisinsight, py3-captum, renovate, jitsucom-jitsu, dbgate, gemini-cli, dbgate-fips, np...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: flux-image-automation-controller, dgraph, sftpgo-plugin-eventsearch, dataplaneapi, fluxcd-kustomize-mutating-webhook, nova, local-path-provisioner, mariadb-operator, polaris, newrelic-infra-operator, temporal, kubewatch, grafana-rollout-operator,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, melange, xeol-fips, cg, docker-cli-buildx-fips, grype, hydra-fips, omnictl-multiarch-fips, terraform-provider-pagerduty, gitlab-runner, ratify-fips, helm-fips, cluster-api-fips, terraform-provider-databricks-fips, grafana,...
CVE-2026-25547 vulnerabilities
Vulnerabilities for packages: lerna, actions-runner, librechat, npm, pulumi, node-gyp, renovate, sqlpad, drupal...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: k8sgpt-operator, stern, kubernetes-csi-driver-nfs, podman, cluster-api-aws-controller, rekor, kserve-modelmesh-serving, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin, go-jsonnet, pulumi-kubernetes-operator, newrelic-infrastructure-agent, harbor,...
