Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

MAL-2026-4862 Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: slsa-verifier, opentofu, pulumi, buildah, splunk-otel-collector, terragrunt, kine, flux, kargo, vault-benchmark, buildkitd, kyverno, step-issuer, external-dns, gitlab-kas, gh, gitlab-runner, go-discover, trivy-operator, kubernetes-dashboard, atlantis, nfpm,...

CVE-2026-46595 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, gitea, loki, prometheus-operator, telegraf, helm, k9s, kaf, minio, fscrypt, osv-scanner, snyk-cli, kine, skaffold, flux, spire-server, zarf, argocd-image-updater, mattermost, aactl, cloud-provider-aws, nerdctl, kyverno, external-dns,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: slsa-verifier, opentofu, pulumi, buildah, splunk-otel-collector, terragrunt, kine, flux, kargo, vault-benchmark, buildkitd, kyverno, step-issuer, external-dns, gitlab-kas, gh, gitlab-runner, go-discover, trivy-operator, kubernetes-dashboard, atlantis, nfpm,...

CVE-2026-39832 vulnerabilities

Vulnerabilities for packages: opentofu, pulumi, buildah, terragrunt, kine, flux, kyverno, step-issuer, external-dns, gitlab-kas, go-discover, trivy-operator, kubernetes-dashboard, nfpm, docker-cli-buildx, istio, melange, external-secrets-operator, telegraf, helm, minio, syft, nuclei, containerd,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: opentofu, pulumi, splunk-otel-collector, terragrunt, kine, flux, buildkitd, kyverno, external-dns, gitlab-kas, gh, gitlab-runner, trivy-operator, kubernetes-dashboard, nfpm, docker-cli-buildx, istio, melange, external-secrets-operator, telegraf, helm, minio, syft,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: melange, external-secrets-operator, flux-image-automation-controller, gitea, opentofu, loki, prometheus-operator, pulumi, telegraf, helm, k9s, gomplate, kaf, minio, podman, fscrypt, pulumi-language-java, splunk-otel-collector, grype, osv-scanner, snyk-cli, terragrunt...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: loki, prometheus-operator, telegraf, helm, kaf, minio, podman, fscrypt, buildah, snyk-cli, kine, flux, spire-server, mattermost, aactl, cloud-provider-aws, nerdctl, kyverno, external-dns, zot, gitlab-kas, containerd, kubernetes, cilium-cli, opentelemetry-collector,...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: buildah-fips, cert-manager, packer, elastic-agent-fips, prometheus-mongodb-exporter, harbor, frankenphp-8.2, kubernetes-dashboard, istio, spire-server, gitlab-kas, podman-fips, frankenphp-8.3, calico-fips, frankenphp-8.4, nemo, kots, omnictl-multiarch-fips, helm,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: buildah-fips, cert-manager, elastic-agent-fips, prometheus-mongodb-exporter, harbor, frankenphp-8.2, kubernetes-dashboard, istio, spire-server, gitlab-kas, podman-fips, frankenphp-8.3, calico-fips, frankenphp-8.4, nemo, kots, omnictl-multiarch-fips, helm,...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, zarf-fips, longhorn-cli, cert-manager, packer, chisel-fips, argo-events, prometheus-podman-exporter-fips, elastic-agent-fips, prometheus-mongodb-exporter, harbor, chainloop-cli, frankenphp-8.2, cloudbeat-fips, kubernetes-dashboard, istio,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, zarf-fips, longhorn-cli, cert-manager, packer, chisel-fips, argo-events, prometheus-podman-exporter-fips, elastic-agent-fips, prometheus-mongodb-exporter, harbor, chainloop-cli, frankenphp-8.2, cloudbeat-fips, kubernetes-dashboard, istio,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, zarf-fips, cert-manager, chisel-fips, elastic-agent-fips, prometheus-mongodb-exporter, harbor, frankenphp-8.2, cloudbeat-fips, kubernetes-dashboard, istio, spire-server, chisel, gitlab-kas, frankenphp-8.3, drone-fips, drone, calico-fips,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, zarf-fips, cert-manager, packer, argo-events, prometheus-podman-exporter-fips, elastic-agent-fips, prometheus-mongodb-exporter, harbor, chainloop-cli, frankenphp-8.2, cloudbeat-fips, kubernetes-dashboard, istio, spire-server, gitlab-kas,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, buildah-fips, crossplane-provider-azure-powerbidedicated, helmfile, crossplane-provider-azure-relay, zarf-fips, caddy-fips, cert-manager, packer, steampipe, crossplane-provider-azure-servicenetworking, chisel-fips,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, buildah-fips, crossplane-provider-azure-powerbidedicated, helmfile, crossplane-provider-azure-relay, zarf-fips, caddy-fips, cert-manager, packer, steampipe, crossplane-provider-azure-servicenetworking, chisel-fips,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: helmfile, zarf-fips, longhorn-cli, cert-manager, crossplane-provider-aws-lambda-fips, crossplane-provider-azure-notificationhubs, argo-events, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-cloudtrail, terraform-provider-azurerm-fips,...

SUSE CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

UBUNTU-CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...