GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, tekton-chains, pulumi-language-java, terraform-provider-acme, cert-manager, chezmoi, opentelemetry-collector, cosign, teleport, trivy, nerdctl, slsa-verifier, prometheus-operator, flux-kustomize-controller, buildkitd,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tekton-chains, aws-eks-pod-identity-agent, nri-consul, gobump, libnvidia-container, terraform-mcp-server, trivy, chartmuseum, nri-f5, hubble, nri-mysql, harbor-cli, prometheus-operator, wire-go, buildkitd, harbor-registry, bom, src, migrate, azure-service-operator,...

CLEANSTART-2026-GR38496 Security fixes in aws-eks-pod-identity-agent 0.2.1-r1

Package aws-eks-pod-identity-agent version 0.2.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-RB88310 Security fixes in aws-eks-pod-identity-agent 0.1.36-r0

Package aws-eks-pod-identity-agent version 0.1.36-r0 fixes 33 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

EUVD-2025-13174

Malicious code in bioql PyPI...

CVE-2023-53076

No description is available for this CVE...

CVE-2023-53076

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53076

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53076

...

CVE-2023-53076

CVE-2023-53076 is rejected/not used and does not represent an active vulnerability entry.

PT-2025-18840

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version with the adjusted bpf jit limit Description A vulnerability in the Linux kernel has been resolved, related to the default bpf jit limit being insufficient. This issue was observed in AWS EKS Kubernete...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: tekton-chains, aws-eks-pod-identity-agent, octo-sts, minio-operator, chezmoi, opentelemetry-collector, cosign, kaniko, trivy, chartmuseum, vexctl, sqlexporter, secrets-store-csi-driver-provider-azure, jitsucom-bulker, flux-kustomize-controller, buildkitd,...

Code injection

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

CVE-2023-35165

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages "aws-cdk-lib" 2.0.0 until 2.80.0 and "@aws-cdk/aws-eks" 1.57.0 until 1.202.0, "eks.Cluster" and "eks.FargateCluste...

CVE-2023-35165: Incorrect Authorization

AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. In the packages aws-cdk-lib 2.0.0 until 2.80.0 and @aws-cdk/aws-eks 1.57.0 until 1.202.0, eks.Cluster and eks.FargateCluster...

@104corp/cdk-aws-codedeploy-on-premises (>=1.0.0, <=1.0.2), @aws-cdk/aws-stepfunctions-tasks (>=1.91.0, <=1.201.0) +30 more potentially affected by CVE-2023-35165 via @aws-cdk/aws-eks (>=1.57.0, <=1.201.0)

@aws-cdk/aws-eks NPM version =1.57.0, =1.0.0, =1.91.0, =1.57.0, =0.12.1, =1.115.0, =1.91.0, =1.91.0, =1.115.0, =0.0.1-beta.1, =0.0.1, =25.1.0, =0.2.0, =0.1.0, =0.3.2 and more Source cves: CVE-2023-35165 Source advisory: GHSA-RX28-R23P-2QC3...

How We Streamlined Infrastructure and Tooling as a Service for Development

At VMware Carbon Black, we’ve historically acquired a broad technology stack in our journey to build the premier security solution that understands cybercriminal behavior. Inheriting such a variety of tooling and storage solutions presented a challenge for us operationally. So, in order to reduce...