47 matches found
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: net-kourier, kube-logging-operator-custom-runner, k9s, kbld, cilium, vertical-pod-autoscaler, pgpool2exporter, crossplane, crossplane-provider-aws-cloudformation, kiali, percona-server-mongodb-operator, kots, goreleaser, litestream, kubernetes-csi-external-snapshotte...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, kube-logging-operator-custom-runner, terraform-provider-time, kbld, falcosidekick, rabbitmq-messaging-topology-operator, tfsec, vertical-pod-autoscaler, ferretdb, newrelic-fluent-bit-output, pgpool2exporter,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: rabbitmq-messaging-topology-operator, skopeo, rekor, bank-vaults, pulumi, goreleaser, scorecard, guac, k3d, sigstore-scaffolding, ksops, zarf, policy-controller, argo-events, k3s, snyk-cli, flux-image-reflector-controller, kubernetes-event-exporter, kubescape,...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: saf, haraka, prism, renovate, py3-captum, kibana, actions-runner, npm, vitess, node-gyp, pelias-api, gemini-cli, code-server...
GHSA-8Q5R-MMJF-575Q Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Due to the combination of checking out PR head branches attacker-controlled, reading .mcp.json from the working directory via default setting sources, and unconditionally enabling all project MCP servers via enableAllProjectMcpServers, it was possible for an attacker who opened a PR containing a...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, homepage, drupal, jitsucom-jitsu, code-server, nemo, tensorflow-cpu-jupyter, wazuh-dashboard-fips, py3-captum, kibana, actions-runner, npm, gitlab-rails-ce, gitlab-rails-ce-fips, opensearch-dashboards-fips, argo-workflows, gemini-cli,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: rabbitmq-messaging-topology-operator, clickhouse-operator, sftpgo-plugin-eventsearch, supercronic, temporal, victoriametrics, dbmate, goreleaser, osv-scanner, grafana-operator, aws-load-balancer-controller, stakater-reloader, flux-image-reflector-controller, go,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: net-kourier, cilium, percona-server-mongodb-operator, victoriametrics-operator, nri-mysql, stern, stakater-reloader, chart-testing, mkcert, go-discover, aactl, smokescreen, pdfcpu, php-fpmexporter, eksctl, flux-helm-controller, dive, promxy, terraform-provider-azapi,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: gitaly, openbao, dagger, flux-kustomize-controller-fips, crossplane-provider-aws-rds-fips, docker, crossplane-provider-keycloak, vault, xeol-fips, buildkitd-fips, kyverno-fips, actions-runner-controller-fips, helm-diff, argocd-image-updater, grafana-alloy,...
CVE-2026-25547 vulnerabilities
Vulnerabilities for packages: lerna, pulumi, sqlpad, renovate, actions-runner, npm, node-gyp, drupal, librechat...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, nri-mysql, stern, k8sgpt, stakater-reloader, mkcert, go-discover, aactl, pdfcpu, php-fpmexporter, dive, promxy, haproxy-ingress, kubernetes-dashboard-web, multus-cni, podinfo, hydra, kubecolor, buildkitd, gomplate, op-geth,...
