5238 matches found
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: kustomize-fips, cert-manager-google-cas-issuer, sftpgo-plugin-kms, minio-fips, crossplane-provider-aws-lambda-fips, rancher-system-upgrade-controller, kubescape-operator-fips, crossplane-provider-aws-efs-fips, aws-flb-cloudwatch-fips, x509-certificate-exporter-fips,...
heist-salt (>=1.0.0 <=5.3.1), isalt (>=2019.12.0 <=2021.2.2) +9 more potentially affected by CVE-2025-62348 via salt (=3007.14.0)
salt PYPI version =3007.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - heist-salt =1.0.0, =2019.12.0, =2019.6.28a3, =2.6.2.dev0, =2020.7.0, =1.1.1, =22.9.8.0rc1, =0.3.2, =0.5.7 - slskit =2022.4.0 Source cves:...
Ubuntu: Security Advisory (USN-7988-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: ratify-fips, tkn-fips, kyverno, istio-fips, neuvector-sigstore-interface-fips, docker-compose-fips, kyverno-notation-aws-fips, gitlab-cng, beats-fips, kyverno-fips, gitlab-cng-fips, beats, k9s-fips, mattermost-fips, grafana, jitsucom-bulker, pluto-fips, zitadel,...
Malicious Package
Overview aws-core-vscode is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
GHSA-8RRH-RW8J-W5FX vulnerabilities
Vulnerabilities for packages: pypy-3.11, datadog-agent, airflow, py3-setuptools, emissary, open-webui, aws-cli, semgrep, mlflow, superset, pip-zipapp, pypy-3.10, kserve, py3-virtualenv, kubeflow-jupyter-web-app, kubeflow-katib, dask-kubernetes...
@alithya-oss/backstage-plugin-aws-apps-backend (=0.4.7), @alithya-oss/backstage-plugin-changelog-backend (=1.0.3) +165 more potentially affected by CVE-2026-24048 via @backstage/backend-defaults (>=0.0.0-nightly-20240929023448 <=0.12.1-next.1)
@backstage/backend-defaults NPM version =0.0.0-nightly-20240929023448, =1.0.7, =0.1.8, =0.3.10, =0.3.6, =0.1.0, =0.4.0, =4.6.0, =0.10.0, =0.12.0 and more Source cves: CVE-2026-24048 Source advisory: OSV:GHSA-Q2X5-4XJX-C6P9...
@alithya-oss/backstage-plugin-aws-apps-backend (=0.4.7), @alithya-oss/backstage-plugin-changelog-backend (=1.0.3) +165 more potentially affected by CVE-2026-24048 via @backstage/backend-defaults (>=0.0.0-nightly-20240929023448 <=0.12.1-next.1)
@backstage/backend-defaults NPM version =0.0.0-nightly-20240929023448, =1.0.7, =0.1.8, =0.3.10, =0.3.6, =0.1.0, =0.4.0, =4.6.0, =0.10.0, =0.12.0 and more Source cves: CVE-2026-24048 Source advisory: SNYK:JS-BACKSTAGEBACKENDDEFAULTS-15064476...
@alithya-oss/backstage-plugin-aws-apps-backend (=0.4.7), @alithya-oss/backstage-plugin-changelog-backend (=1.0.3) +165 more potentially affected by CVE-2026-24046 via @backstage/backend-defaults (>=0.0.0-nightly-20240929023448 <=0.12.1-next.1)
@backstage/backend-defaults NPM version =0.0.0-nightly-20240929023448, =1.0.7, =0.1.8, =0.3.10, =0.3.6, =0.1.0, =0.4.0, =4.6.0, =0.10.0, =0.12.0 and more Source cves: CVE-2026-24046 Source advisory: SNYK:JS-BACKSTAGEBACKENDDEFAULTS-15054278...
@alithya-oss/backstage-plugin-scaffolder-backend-module-aws-apps (>=0.3.10 <=0.3.12), @alithya-oss/plugin-scaffolder-backend-module-aws-apps (>=0.3.6 <=0.3.9) +55 more potentially affected by CVE-2026-24046 via @backstage/plugin-scaffolder-backend (>=0.0.0-nightly-20220708025041 <=1.33.0)
@backstage/plugin-scaffolder-backend NPM version =0.0.0-nightly-20220708025041, =0.3.10, =0.3.6, =0.1.0, =0.4.0, =0.0.0-nightly-2021712211, =0.0.0-nightly-20230325022054, =0.0.0-nightly-2022122206, =0.0.0-nightly-2022122206, =0.0.0-nightly-20230112022659, =0.0.0-nightly-2022122206, =0.4.3, =0.4.7...
Malicious code in aws-crt-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82067e17b63298c1e09a6b616010b7a8ebf7f607510795f98428f8e5305994ab The package aws-crt-nodejs was found to contain malicious code. Source: ghsa-malware 40ddba391f5ca6a4fa75fe5e5440dfd1f57833b391d8db3c2e5918aef284a294...
EUVD-2026-3726
Malicious code in aws-crt-nodejs npm...
MAL-2026-406 Malicious code in aws-crt-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82067e17b63298c1e09a6b616010b7a8ebf7f607510795f98428f8e5305994ab The package aws-crt-nodejs was found to contain malicious code. Source: ghsa-malware 40ddba391f5ca6a4fa75fe5e5440dfd1f57833b391d8db3c2e5918aef284a294...
How 2 Missing Characters Nearly Compromised AWS
A supply chain vulnerability in AWS CodeBuild recently put the entire AWS Console at risk. Learn how Wiz Research found the flaw and how Amazon responded to prevent a global security crisis...
CVE-2025-38132 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
GHSA-6G9X-RPR5-4QRW vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
CVE-2025-38656 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
GHSA-XG28-VM4V-PCGP vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...