capslock

Capslock 是一个针对 Go 包的能力分析 CLI，用于告知用户某个包可以访问哪些特权操作。其原理是通过跟踪对特权标准库操作的传递调用来对 Go 包的能力（capabilities）进行分类。 近年来针对开源软件的供应链攻击日益增多，这凸显了第三方依赖不应被天然信任。能力（capabilities）表明包可以访问哪些权限，并且可以与其他安全信号结合使用，以指示哪些代码在可以被视为可信之前需要额外的审查。 什么是能力？ 当前的安全分析很大程度上专注于识别包中的漏洞——考虑到新 CVE...

Malicious code in nwin64tls (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 72555231efbf126e61cb3aa59d3482bc7967af46898e46eb2b9b7f81af8cd40e Importing the module starts a loop that listens to key strokes and on every capslock press exfiltrates screenshot to a hardcoded location. --- Category:...

MAL-2026-2432 Malicious code in nwin64tls (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 72555231efbf126e61cb3aa59d3482bc7967af46898e46eb2b9b7f81af8cd40e Importing the module starts a loop that listens to key strokes and on every capslock press exfiltrates screenshot to a hardcoded location. --- Category:...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: harbor-registry, kubernetes-event-exporter, rancher-loglevel, smokescreen, sbom-convert, terraform-provider-kubernetes, kafka-proxy, sriov-network-device-plugin, portieris, cargobump, certificate-transparency, cfssl, dgraph, chart-testing, frp,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, sigstore-scaffolding, regclient, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev, metacontroller, spark-operator...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: external-dns, grpc-health-probe-fips, kubernetes-csi-driver-hostpath, kyverno-notation-aws-fips, shfmt, licenseclassifier, custom-pod-autoscaler, task, node-problem-detector, authservice-fips, etcd, cargobump, kubernetes-dashboard-metrics-scraper-fips, beats-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: external-dns, grpc-health-probe-fips, kubernetes-csi-driver-hostpath, kyverno-notation-aws-fips, shfmt, licenseclassifier, custom-pod-autoscaler, task, node-problem-detector, authservice-fips, etcd, cargobump, kubernetes-dashboard-metrics-scraper-fips, beats-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: external-dns, grpc-health-probe-fips, kubernetes-csi-driver-hostpath, kyverno-notation-aws-fips, shfmt, licenseclassifier, custom-pod-autoscaler, task, node-problem-detector, authservice-fips, etcd, cargobump, kubernetes-dashboard-metrics-scraper-fips, beats-fips,...