Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

MAL-2026-4862 Malicious code in veloxml-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a2b332595fb95752df25e794528ff2dd610bf3977b8d4abd7574cb0f21cdff The package advertises fake functionality and exfiltrates the given email and basic information about the host when used. --- Category: MALICIOUS - The campaig...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: osv-scanner, hcloud, terraform-provider-azurerm, trivy, kyverno, eksctl, k8sgpt, wolfictl, sops, podman, docker-machine-driver-harvester, nuclei, argo-events, cloud-provider-aws, kargo, tflint, gh, step, tekton-chains, atlantis, terragrunt, mattermost,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: prometheus-operator, argo-cd, spire-server, flux, rancher-agent, kyverno, containerd, minio, cilium, podman, nerdctl, teleport, fscrypt, cloud-provider-aws, zot, cert-manager, telegraf, aactl, kaf, kots, docker-cli-buildx, mattermost, knative-serving, snyk-cli, kine,...

CVE-2026-46595 vulnerabilities

Vulnerabilities for packages: osv-scanner, prometheus-operator, argo-cd, spire-server, trivy, flux, rancher-agent, kyverno, k9s, containerd, minio, cilium, nerdctl, trivy-operator, argocd-image-updater, fscrypt, cloud-provider-aws, zot, flux-image-automation-controller, cert-manager, telegraf,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: osv-scanner, hcloud, terraform-provider-azurerm, trivy, kyverno, eksctl, k8sgpt, wolfictl, sops, podman, docker-machine-driver-harvester, nuclei, argo-events, cloud-provider-aws, kargo, tflint, gh, step, tekton-chains, atlantis, terragrunt, mattermost,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: osv-scanner, trivy, kyverno, wolfictl, podman, docker-machine-driver-harvester, nuclei, argo-events, cloud-provider-aws, gh, terragrunt, mattermost, snyk-cli, apko, istio, act, gitlab-runner, loki, opentofu, external-dns, kubernetes, syft, nfpm, helm, docker,...

CVE-2026-39832 vulnerabilities

Vulnerabilities for packages: osv-scanner, trivy, kyverno, wolfictl, podman, docker-machine-driver-harvester, nuclei, argo-events, cloud-provider-aws, step, terragrunt, mattermost, snyk-cli, apko, istio, act, loki, opentofu, external-dns, kubernetes, syft, nfpm, helm, prometheus-operator,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: osv-scanner, prometheus-operator, argo-cd, spire-server, trivy, flux, kyverno, k9s, vitess, wolfictl, guac, containerd, minio, gptscript, cilium, podman, nerdctl, teleport, trivy-operator, nuclei, argocd-image-updater, fscrypt, gomplate, argo-events,...

CVE-2026-39835 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubescape-server, argo-events, gitlab-workhorse-ce-fips, amazon-ssm-agent, dagger, k3s, knative-kafka-broker-fips, frankenphp-8.3, argo-cd, pulumi-language-dotnet, flux, terragrunt, gomplate, frankenphp-8.2, chainloop-cli, terraform-fips,...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, k3s, knative-kafka-broker-fips, frankenphp-8.3, argo-cd, flux, frankenphp-8.2, terraform-fips, helm, minio, telegraf, opentelemetry-collector, zot, kots, cloud-provider-aws, terraform, istio, buildah-fips, traefik-fips,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-policyinsights, gitlab-rails-ce-fips, crossplane-provider-azure-network, hcloud, argo-events, gitlab-workhorse-ce-fips, kubescape-server, amazon-ssm-agent, dagger, age, cluster-api-azure-controller-fips, k3s, flux-operator-fips, chisel,...

CVE-2026-39833 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, k3s, knative-kafka-broker-fips, frankenphp-8.3, argo-cd, flux, frankenphp-8.2, helm, minio, telegraf, opentelemetry-collector, zot, kots, cloud-provider-aws, terraform, istio, buildah-fips, traefik-fips,...

CVE-2026-39831 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-policyinsights, gitlab-rails-ce-fips, crossplane-provider-azure-network, hcloud, argo-events, gitlab-workhorse-ce-fips, kubescape-server, amazon-ssm-agent, dagger, cluster-api-azure-controller-fips, k3s, flux-operator-fips, chisel,...

CVE-2026-39830 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubescape-server, argo-events, gitlab-workhorse-ce-fips, amazon-ssm-agent, dagger, k3s, chisel, knative-kafka-broker-fips, frankenphp-8.3, argo-cd, pulumi-language-dotnet, flux, terragrunt, clickhouse-backup-fips, gomplate, frankenphp-8.2,...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubescape-server, argo-events, gitlab-workhorse-ce-fips, amazon-ssm-agent, dagger, k3s, chisel, knative-kafka-broker-fips, frankenphp-8.3, argo-cd, pulumi-language-dotnet, flux, terragrunt, clickhouse-backup-fips, gomplate, frankenphp-8.2,...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubescape-server, gitlab-workhorse-ce-fips, k3s, chisel, knative-kafka-broker-fips, frankenphp-8.3, argo-cd, flux, frankenphp-8.2, kubescape, helm, minio, telegraf, skaffold, opentelemetry-collector, seaweedfs-rocksdb, zot, kots, drone-fips,...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents, crossplane-provider-aws-lightsail, hcloud, crossplane-provider-aws-kafka, k3s, crossplane-provider-aws-kms, tflint-fips, kyverno-policy-reporter-plugins-kyverno, databricks-cli, terragrunt,...

SUSE CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

UBUNTU-CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...