98 matches found
CLEANSTART-2026-AA71310 Security fixes in spire-server-fips 1.14.5-r0
Package spire-server-fips version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986...
GHSA-V75C-CRR9-733C
creationtimestamp| type| source ---|---|--- 2026-07-15 04:34:38+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqnvfpbgnk2w...
GHSA-7M6Q-GGF5-RWG4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X6RC-7QVR-596R vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-823W-23RP-2JJX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J52W-H358-GGWW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4GXM-V5V7-FQC4 pnpm: Reserved bin name deletes PNPM_HOME during global remove
Maintainer Action Plan Maintainer Action Plan This report is ready to review with the shared patch branch. Start with the PR and the expected fixed behavior, then use the detailed exploit narrative below only if you want to replay the original path. - Advisory: CAND-PNPM-085 / GHSA-4gxm-v5v7-fqc4...
CVE-2026-33684
creationtimestamp| type| source ---|---|--- 2026-06-22 14:00:15+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8j8m-p79x-g4jm...
GHSA-4H4G-832R-8C7F vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3V7F-55P6-F55P
creationtimestamp| type| source ---|---|--- 2026-05-30 02:23:48+00:00| seen| https://gist.github.com/konard/ddaf1c7a82581f9e29a8359316e48df3 2026-05-30 12:07:18+00:00| seen| https://gist.github.com/konard/f3567870039c68dff77f077e839add9b...
@ardeora/start-devtools (>=1.0.0 <=1.0.1), @carvajalconsultants/headstart (>=1.0.0 <=1.0.2) +29 more potentially affected by unknown CVE via @tanstack/start-server-core (>=1.121.0-alpha.28 <=1.167.3)
@tanstack/start-server-core NPM version =1.121.0-alpha.28, =1.0.0, =1.0.0, =0.0.14, =0.3.0, =0.3.0, =1.20.3-alpha.1, =1.111.10, =1.121.23, =0.0.1, =1.121.0-alpha.28, =1.20.3-alpha.1, =1.114.29, =1.121.23, =1.121.0-alpha.28, =1.97.4, =1.120.20 and more Source cves: unknown CVE Source advisory:...
📄 NocoBase 2.0.27 VM Sandbox Escape
NocoBase versions 2.0.27 and below VM sandbox escape exploit. Exploit Title: NocoBase 2.0.27 - VM Sandbox Escape Date: 2026-03-26 Exploit Author: Onurcan Genç Vendor Homepage: https://www.nocobase.com/ Software Link: https://github.com/nocobase/nocobase Version: = 2.0.27 — patched in 2.0.28 Teste...
GHSA-62HF-57XW-28J9
creationtimestamp| type| source ---|---|--- 2026-05-05 02:10:29+00:00| seen| https://gist.github.com/alon710/80e5845ba30ef0e257e4add1fe792629 2026-07-21 12:52:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5tzyuull2j...
GHSA-QG5C-HVR5-HJGR
creationtimestamp| type| source ---|---|--- 2026-05-04 23:31:29+00:00| seen| https://gist.github.com/limcheekin/b22dc88a260c8e395b6d84d05bd62a04...
GHSA-879H-M867-CPJQ vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-aws, linux-azure, linux-qemu, linux-vmware...
fl-manager-components-datasets-torch (=0.1.0), fl-manager-components-formatters-pillow (=0.1.0) +11 more potentially affected by CVE-2026-24178 via nvflare (>=2.2.0 <=2.7.1)
nvflare PYPI version =2.2.0, =0.1.0, =0.2.0, =3.1.27, =3.1.27, =3.1.29, =3.1.31 Source cves: CVE-2026-24178 Source advisory: OSV:GHSA-JQP3-QRGH-4846...
@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.5) +21 more potentially affected by unknown CVE via openclaw (>=0.0.1 <=2026.4.2)
openclaw NPM version =0.0.1, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr =0.0.8 - morpho-vault-manager =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XRQ9-JM7V-G9H7...
@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.0-beta.7) +14 more potentially affected by unknown CVE via openclaw (>=0.0.1 <=2026.4.1)
openclaw NPM version =0.0.1, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F3H5-H452-VP3J...