pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: flux, consul-k8s-fips, ingress-nginx-controller, kubernetes, ingress-nginx-controller-fips, commercial-gitlab-rails-ee-fips, prometheus, nvidia-nsight-compute-13.0, k8s-device-plugin, kube-conformance, opentelemetry-collector-k8s, nvidia-nsight-compute-12.9,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, crossplane-provider-family-gcp-config, blobfuse2, fluxcd-kustomize-mutating-webhook-fips, s5cmd-fips, crossplane-provider-aws-kafkaconnect-fips, vault-benchmark, x509-certificate-exporter, kube-router, lmstack-lora-controller,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, crossplane-provider-family-gcp-config, blobfuse2, fluxcd-kustomize-mutating-webhook-fips, crossplane-provider-aws-kafkaconnect-fips, vault-benchmark, x509-certificate-exporter, kube-router, lmstack-lora-controller,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, crossplane-provider-family-gcp-config, blobfuse2, fluxcd-kustomize-mutating-webhook-fips, s5cmd-fips, crossplane-provider-aws-kafkaconnect-fips, vault-benchmark, x509-certificate-exporter, kube-router, lmstack-lora-controller,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, crossplane-provider-family-gcp-config, blobfuse2, fluxcd-kustomize-mutating-webhook-fips, s5cmd-fips, crossplane-provider-aws-kafkaconnect-fips, vault-benchmark, x509-certificate-exporter, kube-router, lmstack-lora-controller,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: prometheus-beat-exporter-fips, crossplane-provider-family-gcp-config, blobfuse2, fluxcd-kustomize-mutating-webhook-fips, s5cmd-fips, crossplane-provider-aws-kafkaconnect-fips, vault-benchmark, x509-certificate-exporter, kube-router, lmstack-lora-controller,...

AgentSpy: Making AI Agent Behavior Observable

AI agents built on large language models LLMs run shell commands, read and write files, and reach the network, typically with their user's privileges. However, what an agent does during an execution is difficult to understand: tests assert on the result, and the agent's trajectory records only wh...

PT-2026-109028

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

@gudman/charter-conformance (0.1.0), @gudman/charter-core (0.1.0) +1 more potentially affected by unknown CVE via @openzeppelin/confidential-contracts (0.5.1)

@openzeppelin/confidential-contracts NPM version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/confidential-contracts and may be impacted: - @gudman/charter-conformance 0.1.0 - @gudman/charter-core 0.1.0 -...

Dynamic Conformance Testing of WebGPU through Specification-Driven Mutation

WebGPU is a low-level graphics and compute API that exposes modern GPU functionality to web applications. While the official WebGPU Conformance Test Suite CTS focuses on well-formed usage under the WebGPU specification, it is not designed to stress implementations with semantic edge cases or...

CVE-2026-73494

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42, five HTTP/1.1 conformance laxities in the hand-written Java parser under http/src/main/java/org/http4s/blaze/http/parser/ can cause blaze to derive a...

CVE-2026-73494

blaze is a Scala library for asynchronous network I/O pipelines. Five HTTP/1.1 conformance laxities in its hand-written Java parser (http/src/main/java/org/http4s/blaze/http/parser/) accept malformed requests—invalid tchar header names, obs-fold lines, unsupported Transfer-Encoding values, duplic...

CVE-2026-73494: Inconsistent Interpretation of HTTP Requests

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42, five HTTP/1.1 conformance laxities in the hand-written Java parser under http/src/main/java/org/http4s/blaze/http/parser/ can cause blaze to derive a...

Malicious code in conformance-test (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

ai.astraform:remote-domain-author-kit-java (0.2.0), ai.astraform:remote-domain-conformance-java (0.2.0) +6854 more potentially affected by CVE-2026-59281 via org.springframework:spring-web (>=7.0.0-m1, <=7.0.8)

org.springframework:spring-web MAVEN version =7.0.0-m1, =0.1.0, =0.0.1, =0.0.1, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta.1, =0.1.0, =0.1.0, =1.8.1 and more Source cves: CVE-2026-59281 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-19267078...

sg3_utils security, bug fix, and enhancement update

An update is available for sg3utils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sg3utils packages provide command-line utilities for devices that use t...

RLSA-2026:50142 Important: sg3_utils security, bug fix, and enhancement update

The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes: sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output...

Important: Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

An update for sg3utils is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

An update for sg3utils is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...