anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CLEANSTART-2026-RV97727 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the argo-cd package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

CLEANSTART-2026-IY83254 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Security vulnerability affects the argo-cd package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions...

CLEANSTART-2026-JZ64698 RSA and DSA public key parsers did not enforce size limits on key parameters

Security vulnerability affects the argo-cd package. The RSA and DSA public key parsers did not enforce size limits on key parameters...

CLEANSTART-2026-AR72893 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

Security vulnerability affects the argo-cd package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

CLEANSTART-2026-TQ25238 On Unix systems, opening a file in an os

Security vulnerability affects the argo-cd package. On Unix systems, opening a file in an os...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

CVE-2026-24061-GNU-inetutils-Telnet-Detector

CVE-2026-24061 GNU inetutils Telnet Detector A safe, passive detection tool for identifying potential exposure to CVE-2026-24061 , a vulnerability affecting certain versions of GNU inetutils telnet. This project is designed for DevOps pipelines , infrastructure audits , and defensive security...

pythia-sql-clairvoyance

Production-ready SQL injection scanner with 6 detection methods, AI-powered remediation, SARIF output, and CI/CD integration. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · PHP vulnerable shop · 11 findings detected · safe mode · 2265.56s !Pythia — HTML...

makes

⚠️ Deprecation notice ⚠️ After a thorough review of Makes and other build system alternatives, Fluid Attacks has decided to transition fully to Nix Flakes for all our builds. This decision brings significant benefits, including the opportunity to rely on and contribute to the incredible Nix...

PT-2026-120800

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 7.0 through 18.11.13 GitLab CE/EE versions 19.0 through 19.0.10 GitLab CE/EE versions 19.1 through 19.1.9 GitLab CE/EE versions 19.2 through 19.2.9 GitLab CE/EE versions 19.3 through 19.3.6 GitLab CE/EE versions 19.4...

CVE-2026-113708

A flaw was found in Argo CD, where a crafted Kustomize remote base URL can inject options into a Git command run by the repo-server. This allows an attacker to execute arbitrary commands inside argocd-repo-server and read repository credentials and other data accessible to that process...

CVE-2026-113709

A flaw was found in Argo CD, where a Kustomize kustomization can point Helm at a repository-controlled directory and load a plugin that runs when Kustomize Helm rendering is enabled in the repo-server. This allows an attacker to execute arbitrary commands inside argocd-repo-server and read...

CVE-2026-113672

A flaw was found in Argo CD. When processing Jsonnet files, the application does not restrict file imports to the intended repository, allowing files outside of it to be read. This can lead to disclosure of sensitive information, such as credentials and access tokens, and may also result in a...

CVE-2026-113708

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base, or component URLs to git fetch without an end-of-options separator. A leading-hyphen value can ...

CVE-2026-113709

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point Helm's config and data directories at a repository-controlled location...

CVE-2025-61560

A flaw was found in Argo CD. A race condition in the SessionManager component allows a remote attacker to bypass rate limiting protections by sending concurrent requests. Consequently, an attacker can conduct automated brute-force attacks against user accounts without being blocked. Mitigation To...

CVE-2026-113672

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...

CVE-2026-113709

In Argo CD versions 2.1.0 through 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, a vulnerability exists when the --enable-helm flag is used for kustomize build . If helmGlobals.configHome points to a repository-controlled location, Helm automatically loads and executes downloader plugins from a directory ...