47 matches found
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: podinfo, rancher-webhook, flux-image-reflector-controller, steampipe, frp, cert-manager, kserve, aws-flb-kinesis, kuma, trino, prometheus-adapter, docker-cli-buildx, aws-nuke, percona-server-mongodb-operator, victoriametrics-cluster, gomplate, cert-exporter,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, podinfo, postgres-operator, steampipe, frp, gptscript, crossplane-provider-sql, aws-flb-kinesis, kubernetes-dns-node-cache, kuma, kine, mongodb-kubernetes-operator, scorecard, tfsec, percona-server-mongodb-operator, custom-pod-autoscaler,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: rook, zot, actions-runner-controller, aactl, flux-image-reflector-controller, rabbitmq-messaging-topology-operator, crossplane-provider-azure-sql, flux-notification-controller, flux, gh, sops, terraform, falcoctl, kubescape, crossplane-provider-family-azure, gitsign,...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: actions-runner, vitess, npm, kibana, saf, py3-captum, haraka, node-gyp, renovate, prism, code-server, pelias-api, gemini-cli...
GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, librechat, kubeflow-pipelines, kubeflow-centraldashboard, py3-jupyterlab, azurite, homepage, prism, wazuh-dashboard, code-server, nextcloud-server, argo-workflows, redisinsight, py3-captum, renovate, jitsucom-jitsu, dbgate, gemini-cli, dbgate-fips, np...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: actions-runner-controller, flux-image-reflector-controller, rabbitmq-messaging-topology-operator, oras, flux-notification-controller, tailscale, flux, gh, ingress-nginx-controller, volume-modifier-for-k8s, mariadb-operator, temporal, go, pluto,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: tailscale, cert-manager, mongodb-kubernetes-operator, aws-flb-kinesis, newrelic-infrastructure-agent, cert-exporter, sftpgo, kubernetes-csi-node-driver-registrar, nats-server, grafana-rollout-operator, crossplane-provider-azure-storage, maru, gobuster, cilium, promxy...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx, melange, xeol-fips, cg, docker-cli-buildx-fips, grype, hydra-fips, omnictl-multiarch-fips, terraform-provider-pagerduty, gitlab-runner, ratify-fips, helm-fips, cluster-api-fips, terraform-provider-databricks-fips, grafana,...
CVE-2026-25547 vulnerabilities
Vulnerabilities for packages: lerna, actions-runner, librechat, npm, pulumi, node-gyp, renovate, sqlpad, drupal...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: podinfo, tailscale, gptscript, mongodb-kubernetes-operator, kubernetes-dns-node-cache, kuma, newrelic-infrastructure-agent, nri-memcached, newrelic-nri-kube-events, sftpgo, nats-server, grafana-rollout-operator, gobuster, promxy, src-fingerprint, pdfcpu,...
