153 matches found
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3-fips, dapr, github-mcp-server, kube-vip, mongo-tools-fips, prometheus-elasticsearch-exporter-fips, kuma, kubescape-http-request, flux-operator-fips, kubevirt-cdi-controller-fips, influx, pgpool2exporter, flux-source-controller,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: kubevirt-cdi-controller-fips, prometheus-pgbouncer-exporter, oauth2-proxy, linkerd2-proxy-init, cert-manager-csi-driver, scorecard, kubernetes-dashboard-web, emqx-exporter-fips, oras-fips, vault, cri-tools, grpc-health-probe, minio-object-browser, dkron,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3-fips, dapr, github-mcp-server, kube-vip, mongo-tools-fips, prometheus-elasticsearch-exporter-fips, kuma, kubescape-http-request, flux-operator-fips, kubevirt-cdi-controller-fips, influx, pgpool2exporter, flux-source-controller,...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: datadog-agent, authentik, prefect, open-webui, barman, dagster, mycli, k8s-sidecar, superset, vllm-openai-cuda-12.9, localstack, pgadmin4-fips, dask-kubernetes, kserve, jupyter-base-notebook, pgadmin4, gitlab-cng-fips, py3-cassandra-medusa, apache-beam-python-3.12-sd...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: datadog-agent, authentik, prefect, open-webui, barman, dagster, mycli, k8s-sidecar, superset, vllm-openai-cuda-12.9, localstack, pgadmin4-fips, dask-kubernetes, kserve, jupyter-base-notebook, pgadmin4, gitlab-cng-fips, py3-cassandra-medusa, apache-beam-python-3.12-sd...
Security update for osslsigncode (critical)
openSUSE Security Update: Security update for osslsigncode Announcement ID: openSUSE-SU-2026:0115-1 Rating: critical References: 1260680 Cross-References: CVE-2025-70888 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This...
CVE-2026-27137 vulnerabilities
Vulnerabilities for packages: flux-source-watcher, victorialogs-fips, flux-notification-controller, flux-operator-fips, grafana-rollout-operator, pgwatch, aws-ebs-csi-driver-fips, flux-source-controller, temporal-fips, pluto, go, cert-manager-fips, localstack, flux-operator, victorialogs,...
CVE-2026-27138 vulnerabilities
Vulnerabilities for packages: flux-source-watcher, victorialogs-fips, flux-notification-controller, flux-operator-fips, grafana-rollout-operator, pgwatch, aws-ebs-csi-driver-fips, flux-source-controller, temporal-fips, pluto, go, cert-manager-fips, localstack, flux-operator, victorialogs,...
GHSA-PH5J-38MG-J6HP vulnerabilities
Vulnerabilities for packages: flux-source-watcher, victorialogs-fips, flux-notification-controller, flux-operator-fips, grafana-rollout-operator, pgwatch, aws-ebs-csi-driver-fips, flux-source-controller, temporal-fips, pluto, go, cert-manager-fips, localstack, flux-operator, victorialogs,...
GHSA-7HFW-R8QC-89V4 vulnerabilities
Vulnerabilities for packages: flux-source-watcher, victorialogs-fips, flux-notification-controller, flux-operator-fips, grafana-rollout-operator, pgwatch, aws-ebs-csi-driver-fips, flux-source-controller, temporal-fips, pluto, go, cert-manager-fips, localstack, flux-operator, victorialogs,...
GHSA-MXW3-3HH2-X2MH vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rails, ruby3.2-rails, ruby3.4-rack, logstash, ruby3.4-rails, ruby3.3-rack, ruby4.0-rack, gitlab-rails-ce-fips, gitlab-cng...
CVE-2026-25500 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rails, ruby3.2-rails, ruby3.4-rack, logstash, ruby3.4-rails, ruby3.3-rack, ruby4.0-rack, gitlab-rails-ce-fips, gitlab-cng...
GHSA-WHRJ-4476-WVMP vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rails, ruby3.2-rails, ruby3.4-rack, logstash, ruby3.4-rails, ruby3.3-rack, ruby4.0-rack, gitlab-rails-ce-fips, gitlab-cng...
CVE-2026-22860 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rack, ruby4.0-rails, ruby3.2-rails, ruby3.4-rack, logstash, ruby3.4-rails, ruby3.3-rack, ruby4.0-rack, gitlab-rails-ce-fips, gitlab-cng...
CVE-2025-11065 vulnerabilities
Vulnerabilities for packages: neuvector-sigstore-interface-fips, bank-vaults, ratify-fips, istio-fips, kyverno-notation-aws-fips, pluto-fips, zitadel, gitlab-cng, gitlab-cng-fips, beats-fips, rancher-security-scan, beats, kyverno-fips, jitsucom-bulker, docker-compose-fips, k9s-fips, tkn-fips,...
Malicious Package
Overview cng-web-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
Malicious code in cng-web-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fca29734b6580902f0808df01db408d09cb6704720e6cac215827f5812f75 The package cng-web-lib was found to contain malicious code. Source: ghsa-malware ea72356f6a1b185aea027fcf291bdb55d1a3f4e6ae715b68e42c5e33834a28d9 An...
MAL-2026-173 Malicious code in cng-web-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018fca29734b6580902f0808df01db408d09cb6704720e6cac215827f5812f75 The package cng-web-lib was found to contain malicious code. Source: ghsa-malware ea72356f6a1b185aea027fcf291bdb55d1a3f4e6ae715b68e42c5e33834a28d9 An...
