MAL-2026-4862 Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, atlantis, scorecard, sops, eksctl, argo-events, flux-image-automation-controller, buildkitd, hcloud, osv-scanner, rancher-machine,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: prometheus-operator, kaf, rancher, cert-manager, containerd, falco-no-driver, kyverno, buildah, docker-cli-buildx, cilium-cli, kubernetes-dashboard, cilium, opentelemetry-collector, mattermost, fscrypt, minio, k3s, external-dns, nerdctl, flux, kine, kots, loki,...

CVE-2026-46595 vulnerabilities

Vulnerabilities for packages: skaffold, zarf, argocd-image-updater, kaf, prometheus-operator, rancher, cert-manager, containerd, falco-no-driver, gitea, kyverno, cilium-cli, kubernetes-dashboard, cilium, opentelemetry-collector, trivy, mattermost, fscrypt, minio, k3s,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: skaffold, zarf, argocd-image-updater, kaf, prometheus-operator, cert-manager, containerd, pulumi-kubernetes-operator, splunk-otel-collector, falco-no-driver, gitea, gptscript, kyverno, wolfictl, pulumi, scorecard, cilium-cli, pulumi-language-dotnet, apko, grype,...

CVE-2026-39832 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, pulumi-kubernetes-operator, gitea, step-kms-plugin, scorecard, argo-events, flux-image-automation-controller, osv-scanner, podman, spire-server, kubernetes, melange, kaf, pulumi, kubernetes-dashboard, act, opentelemetry-collector,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, pulumi-kubernetes-operator, gitea, rootlesskit, scorecard, argo-events, flux-image-automation-controller, buildkitd, osv-scanner, rancher-machine, podman, spire-server, kubernetes, melange, kaf, pulumi, wal-g, kubernetes-dashboard,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, containerd, pulumi-kubernetes-operator, gitea, step-kms-plugin, rootlesskit, slsa-verifier, atlantis, scorecard, sops, eksctl, argo-events, flux-image-automation-controller, buildkitd, hcloud, osv-scanner, rancher-machine,...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: kubescape, splunk-otel-collector-fips, kyverno-fips, docker-cli-buildx-fips, external-secrets-operator-fips, chisel, skaffold-fips, redpanda-console, longhorn-cli-fips, zot, argo-cd, grype-db, prometheus-podman-exporter, external-dns, apko-fips, chainctl,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: buildah, kyverno-fips, docker-cli-buildx-fips, external-secrets-operator-fips, zot, argo-cd, external-dns, gitlab-workhorse-ce, snyk-cli, nemo, harbor-fips, gitlab-workhorse-ce-fips, containerd, kubernetes-dashboard, teleport-operator-fips, opentofu-fips, zitadel,...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: buildah, kyverno-fips, docker-cli-buildx-fips, external-secrets-operator-fips, zot, argo-cd, external-dns, gitlab-workhorse-ce, snyk-cli, nemo, harbor-fips, gitlab-workhorse-ce-fips, containerd, kubernetes-dashboard, teleport-operator-fips, opentofu-fips, zitadel,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: kubescape, kyverno-fips, external-secrets-operator-fips, chisel, skaffold-fips, zot, argo-cd, external-dns, gitlab-workhorse-ce, kubevela-fips, snyk-cli, kubescape-server-fips, nemo, harbor-fips, gitlab-workhorse-ce-fips, containerd, kubernetes-dashboard,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, kyverno-fips, splunk-otel-collector-fips, teleport, docker-cli-buildx-fips, external-secrets-operator-fips, chisel, skaffold-fips, step-kms-plugin-fips, redpanda-console, crossplane-provider-azure-netapp, falcoctl-fips,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: kubescape, splunk-otel-collector-fips, kyverno-fips, docker-cli-buildx-fips, external-secrets-operator-fips, chisel, skaffold-fips, redpanda-console, longhorn-cli-fips, zot, argo-cd, grype-db, prometheus-podman-exporter, external-dns, apko-fips, chainctl,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, kyverno-fips, splunk-otel-collector-fips, teleport, docker-cli-buildx-fips, age-fips, external-secrets-operator-fips, chisel, skaffold-fips, step-kms-plugin-fips, redpanda-console, crossplane-provider-azure-netapp, falcoctl-fips,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: kubescape, splunk-otel-collector-fips, kyverno-fips, external-secrets-operator-fips, skaffold-fips, redpanda-console, zot, argo-cd, grype-db, prometheus-podman-exporter, external-dns, apko-fips, chainctl, gitlab-workhorse-ce, kubevela-fips, apko, snyk-cli, cg,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, splunk-otel-collector-fips, crossplane-provider-aws-route53resolver, agentbeat-fips, crossplane-provider-aws-cloudwatch-fips, crossplane-provider-aws-elb, grype-db, external-dns, gitlab-workhorse-ce, kubevela-fips, crossplane-provider-aws-elb-fips...

SUSE CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

UBUNTU-CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

CVE-2026-48961 IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...