CLEANSTART-2026-SU87029 Security fixes in argo-cd 3.3.12-r4

Package argo-cd version 3.3.12-r4 fixes 2 vulnerabilities: ghsa-259r-337f-4rfw, CVE-2026-41178...

CLEANSTART-2026-II53972 Security fixes in argo-cd 3.4.6-r1

Package argo-cd version 3.4.6-r1 fixes 3 vulnerabilities: CVE-2026-71557, CVE-2026-71556, CVE-2026-50163...

CLEANSTART-2026-VL72619 Security fixes in argo-cd 3.3.13-r0

Package argo-cd version 3.3.13-r0 fixes 3 vulnerabilities: CVE-2026-50163, CVE-2026-71556, CVE-2026-71557...

CLEANSTART-2026-OU97529 Security fixes in argo-cd 3.3.14-r1

Package argo-cd version 3.3.14-r1 fixes 5 vulnerabilities: CVE-2026-71556, CVE-2026-71557, CVE-2026-2303, ghsa-hrxh-6v49-42gf, CVE-2026-50163...

CLEANSTART-2026-OO99794 Security fixes in argo-cd-fips 3.4.7-r1

Package argo-cd-fips version 3.4.7-r1 fixes 13 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-VT71030 Security fixes in argo-cd-fips 3.4.7-r2

Package argo-cd-fips version 3.4.7-r2 fixes 12 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-LO94255 Security fixes in argo-cd 3.3.14-r3

Package argo-cd version 3.3.14-r3 fixes 2 vulnerabilities: CVE-2026-50163, CVE-2026-41178...

CLEANSTART-2026-LR05303 Security fixes in argo-cd-fips 3.4.7-r3

Package argo-cd-fips version 3.4.7-r3 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-IQ94380 Security fixes in argo-cd 3.4.7-r1

Package argo-cd version 3.4.7-r1 fixes 5 vulnerabilities: CVE-2026-71556, CVE-2026-71557, ghsa-hrxh-6v49-42gf, CVE-2026-50163, CVE-2026-41178...

zizmor v1.30.0

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds: Template injection vulnerabilities, leading to attacker-controlled code execution...

PT-2026-89974

Package argo-cd version 3.4.7-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

PT-2026-89962

Package argo-cd version 3.3.14-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

Malicious code in airbnb-relaxed (npm)

The package airbnb-relaxed was found to contain malicious code. Source: google-open-source-security 1b6a5e736a13af63369b9867066a010eb0cb881853407342fe42c472c919dd3c This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses...

Malicious code in airbnb-hooks (npm)

The package airbnb-hooks was found to contain malicious code. Source: google-open-source-security 33c430dfd90c926bae8206a1ac92dcb5b15de7ef7b729c5bc8f88452c6793b44 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses o...

Malicious code in airbnb-es5 (npm)

The package airbnb-es5 was found to contain malicious code. Source: google-open-source-security 8210336cb16ae6428e936268a05b3f57769d39cfc48cbe662870575dc1faf80b This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

Malicious code in airbnb-bundle (npm)

The package airbnb-bundle was found to contain malicious code. Source: google-open-source-security ea6660cd54215b1f9c967e8522156e2728e7ebb64ce3d3052d49f3e41bbffd87 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses ...

Malicious code in airbnb-angular (npm)

The package airbnb-angular was found to contain malicious code. Source: google-open-source-security 7fff1f5000c3707b881be6257856ad35d4e8c37a27f0219b0e380ee46fcae5ea This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses...

Malicious code in adobe-alloy (npm)

The package adobe-alloy was found to contain malicious code. Source: google-open-source-security a8e952541082c8bec5f3b5c23a250995aa6d04b35925087502b6ed7100760d27 This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

ship-safe v9.7.5

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

Automating Static Code Analysis through CI/CD Pipeline Integration

In the contemporary landscape of software devel-opment, securing sensitive data is paramount to safeguarding organizational reputation, preventing financial losses, and pro-tecting individuals from identity theft. This paper addresses the pervasive challenge of identifying and rectifying security...