AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos

Security firm Pillar reveals the Chaos Agent in which Hackerbot-Claw, an AI agent, used natural language to compromise major GitHub projects and hijack developer tools...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: backup-restore-operator, gitlab-runner-fips, eck-operator-fips, calico, docker-fips, k8s-agents-operator-fips, livekit-egress, boring-registry-fips, grype, kaniko, cluster-api-ipam-provider-in-cluster, migrate, envoy-gateway-fips, ksops, cerbos, trillian-fips,...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: opencost, github-mcp-server, osv-scanner, flux-operator, ferretdb, datadog-agent, jaeger, gptscript...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: opencost, github-mcp-server, osv-scanner, flux-operator, ferretdb, datadog-agent, jaeger, gptscript...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, flux-operator, osv-scanner, gitlab-workhorse-ce, opencost-fips, ferretdb, gptscript, github-mcp-server, opencost, flux-operator-fips, jaeger, jaeger-fips, gitlab-workhorse-ce-fips, datadog-agent...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, flux-operator, osv-scanner, gitlab-workhorse-ce, opencost-fips, ferretdb, gptscript, github-mcp-server, opencost, flux-operator-fips, jaeger, jaeger-fips, gitlab-workhorse-ce-fips, datadog-agent...

CVE-2026-26007 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, localstack, k8s-sidecar, litellm, semgrep, apache-beam-python-3.11-sdk, pgadmin4-fips, in-toto, gitlab-cng, prefect, datadog-agent-fips, request-1276, py3-cassandra-medusa, barman, kubeflow-pipelines, airflow, ansible-operator-fips,...

GHSA-R6PH-V2QM-Q3C2 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, localstack, k8s-sidecar, litellm, semgrep, apache-beam-python-3.11-sdk, pgadmin4-fips, in-toto, gitlab-cng, prefect, datadog-agent-fips, request-1276, py3-cassandra-medusa, barman, kubeflow-pipelines, airflow, ansible-operator-fips,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: kyverno, jitsucom-bulker, gitlab-runner, datadog-agent, bank-vaults...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: grafana-mimir-fips, elastic-agent-fips, mattermost-fips, gitlab-runner-fips, ratify-fips, beats-fips, grafana-fips, gitlab-cng, datadog-agent-fips, istio-fips, neuvector-sigstore-interface-fips, pluto-fips, boring-registry-fips, grafana, zitadel, docker-compose-fips,...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, open-webui, py3-cassandra-medusa, emissary, superset, kubeflow-katib, kserve, kubeflow-jupyter-web-app, semgrep, airflow, mlflow, pypy-3.11, py3-setuptools, datadog-agent, pypy-3.10, tensorflow-cpu-jupyter...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, localstack, semgrep, apache-beam-python-3.11-sdk, pypy-3.10, tritonserver-backend-vllm-cuda-12.9, py3-setuptools, datadog-agent-fips, ansible-operator, azure-functions-python-worker, emissary, py3-cassandra-medusa, request-1276,...

GHSA-XRWG-MQJ6-6M22 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-22771 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-22771 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, tigera-operator, datadog-agent...

GHSA-XRWG-MQJ6-6M22 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, tigera-operator, datadog-agent...

CVE-2021-22260

A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the...

CVE-2025-47908 vulnerabilities

Vulnerabilities for packages: grafana-mimir, cortex, fulcio, prometheus-alertmanager, timestamp-authority, datadog-agent, rekor...

GHSA-77HH-43CM-V8J6 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips...

CVE-2025-47908 vulnerabilities

Vulnerabilities for packages: argo-cd, datadog-agent-fips, fulcio, grafana, tempo-fips, timestamp-authority-fips, prometheus-alertmanager, grafana-mimir, cortex, fulcio-fips, timestamp-authority, prometheus-alertmanager-fips, argo-cd-fips, grafana-fips, rekor-fips, cortex-fips, rekor, datadog-age...