GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitlab-runner, prometheus, sealed-secrets, ko, zarf, crossplane-provider-aws-sns, tw, policy-controller, traefik, kine, step-kms-plugin, neuvector-sigstore-interface, src, cilium-cli, prometheus-operator, podman, cert-manager, kots, openbao, syft, buildah,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus, cni-plugins, envconsul, ko, cerbos, kube-bench, nri-memcached, terraform, step-kms-plugin, neuvector-sigstore-interface, kind, src, cilium-cli, prometheus-operator, lazydocker, libnvidia-container, regclient, dgraph, buildkitd, cloud-provider-vsphere,...

CLEANSTART-2026-GR38496 Security fixes in aws-eks-pod-identity-agent 0.2.1-r1

Package aws-eks-pod-identity-agent version 0.2.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-RB88310 Security fixes in aws-eks-pod-identity-agent 0.1.36-r0

Package aws-eks-pod-identity-agent version 0.1.36-r0 fixes 33 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

EUVD-2025-13174

Malicious code in bioql PyPI...

CVE-2023-53076

No description is available for this CVE...

CVE-2023-53076

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53076

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53076

...

CVE-2023-53076

CVE-2023-53076 is rejected/not used and does not represent an active vulnerability entry.

PT-2025-18840 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version with the adjusted bpf jit limit Description: A vulnerability in the Linux kernel has been resolved, related to the default bpf jit limit being insufficient. This issue was observed in AWS EKS...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: prometheus, filebrowser, ko, zarf, policy-controller, traefik, sftpgo-plugin-kms, bank-vaults, boring-registry, trufflehog, kine, terraform, step-kms-plugin, weaviate, hydra, minio-operator, flux-image-reflector-controller, kots, openbao, flyte, dgraph, buildkitd,...

Code injection

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

How We Streamlined Infrastructure and Tooling as a Service for Development

At VMware Carbon Black, we’ve historically acquired a broad technology stack in our journey to build the premier security solution that understands cybercriminal behavior. Inheriting such a variety of tooling and storage solutions presented a challenge for us operationally. So, in order to reduce...