GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, terraform-provider-acme, apko, go-discover, external-dns, prometheus-operator, chisel, crossplane-provider-azure-managedidentity, ksops, pulumi-language-yaml, zarf, osv-scanner, flux-kustomize-controller, crossplane-provider-aws-s3,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kuberlr, ini-file, docker-machine-driver-harvester, prometheus-operator, caddy, timescaledb-tune, containerd, regclient, zot, nri-mysql, src, grafana-alloy, nri-redis, nri-f5, cluster-api-provider-vsphere, opentofu, rabbitmq-cluster-operator, oauth2-proxy, glow,...

CLEANSTART-2026-GR38496 Security fixes in aws-eks-pod-identity-agent 0.2.1-r1

Package aws-eks-pod-identity-agent version 0.2.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-RB88310 Security fixes in aws-eks-pod-identity-agent 0.1.36-r0

Package aws-eks-pod-identity-agent version 0.1.36-r0 fixes 33 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

EUVD-2025-13174

Malicious code in bioql PyPI...

CVE-2023-53076

No description is available for this CVE...

CVE-2023-53076

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53076

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53076

...

CVE-2023-53076

CVE-2023-53076 is rejected/not used and does not represent an active vulnerability entry.

PT-2025-18840 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version with the adjusted bpf jit limit Description: A vulnerability in the Linux kernel has been resolved, related to the default bpf jit limit being insufficient. This issue was observed in AWS EKS...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, thanos, crossplane-provider-azure-managedidentity, ksops, zarf, flux-kustomize-controller, scorecard, zot, grafana-alloy, flux-source-controller, opentofu, oauth2-proxy, boring-registry, falcosidekick, k8sgpt, terraform, flyte,...

Code injection

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

How We Streamlined Infrastructure and Tooling as a Service for Development

At VMware Carbon Black, we’ve historically acquired a broad technology stack in our journey to build the premier security solution that understands cybercriminal behavior. Inheriting such a variety of tooling and storage solutions presented a challenge for us operationally. So, in order to reduce...