6474 matches found
PT-2026-80340
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion in github.com/aws/aws-cdk-go/awscdk...
USN-8629-2 linux-aws-7.0 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...
Deserialization Of Untrusted Data
Apache Camel PQC Component is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to AwsSecretsManagerKeyLifecycleManager.deserializeMetadata deserializing attacker-controlled data with ObjectInputStream.readObject without an ObjectInputFilter or class allow-list, allowing a...
GO-2026-6218 vulnerabilities
Vulnerabilities for packages: zarf, pdfcpu, metrics-agent, hubble-ui, rancher-system-agent, step, docker-credential-ecr-login, certificate-transparency, rekor, sealed-secrets, osv-scanner, pinact, juicefs-csi-driver, rancher, falco-exporter, controller-gen, crane, addon-resizer,...
CVE-2026-56860 vulnerabilities
Vulnerabilities for packages: zarf, pdfcpu, metrics-agent, hubble-ui, rancher-system-agent, step, docker-credential-ecr-login, certificate-transparency, rekor, sealed-secrets, osv-scanner, pinact, juicefs-csi-driver, rancher, falco-exporter, controller-gen, crane, addon-resizer,...
Malicious code in notafollower122 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83409fb8c0dc76764a944064219de6a4d59d6b24413db5e36d897681f3183add package.json declares a postinstall lifecycle script that runs automatically on npm install. The script uses childprocess to query the AWS ECS...
MAL-2026-14035 Malicious code in notafollower122 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83409fb8c0dc76764a944064219de6a4d59d6b24413db5e36d897681f3183add package.json declares a postinstall lifecycle script that runs automatically on npm install. The script uses childprocess to query the AWS ECS...
GO-2026-5268 vulnerabilities
Vulnerabilities for packages: commercial-kyverno, kyverno-notation-aws-fips, kyverno-notation-aws...
GO-2026-5575 vulnerabilities
Vulnerabilities for packages: kyverno, commercial-kyverno, kyverno-notation-aws-fips, kyverno-notation-aws...
GO-2026-5594 vulnerabilities
Vulnerabilities for packages: kyverno, kyverno-notation-aws-fips, kyverno-notation-aws, commercial-kyverno, kyverno-fips...
GO-2026-5621 vulnerabilities
Vulnerabilities for packages: commercial-kyverno, kyverno-notation-aws-fips...
GO-2026-5337 vulnerabilities
Vulnerabilities for packages: kyverno, kyverno-notation-aws-fips, kyverno-notation-aws, commercial-kyverno, kyverno-fips...
GO-2025-3652 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws...
GO-2025-3823 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...
GO-2026-5351 vulnerabilities
Vulnerabilities for packages: kyverno, kyverno-notation-aws, kyverno-notation-aws-fips, kyverno-fips...
GO-2026-5374 vulnerabilities
Vulnerabilities for packages: kyverno, kyverno-notation-aws, kyverno-notation-aws-fips, kyverno-fips...
GO-2026-5371 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws-fips, kyverno-notation-aws...
GO-2025-3562 vulnerabilities
Vulnerabilities for packages: kyverno, commercial-kyverno, kyverno-notation-aws-fips, kyverno-notation-aws...
GO-2026-4316 vulnerabilities
Vulnerabilities for packages: fleet-server-fips, cloudbeat-fips, cloudbeat, aws-lambda-runtime-interface-emulator-fips, commercial-kyverno, custom-pod-autoscaler, custom-pod-autoscaler-fips, kyverno-fips, aws-lambda-runtime-interface-emulator...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer-fips, gitlab-operator, percona-xtradb-cluster-operator-fips, cert-manager-openshift-routes, cert-manager-webhook-pdns, mariadb-operator-fips, cert-manager-csi-driver, percona-server-mongodb-operator-fips, cert-manager-istio-csr,...