4062-1

Esempio di Black Duck CoPilot Gradle/Travis CI Mostra una configurazione funzionante per utilizzare l'integrazione Black Duck CoPilot nell'analisi del rischio delle dipendenze del progetto Configurazione Travis CI Il file .travis.yml è stato modificato per caricare i dati delle dipendenze generat...

VulnReach

VulnReach Laufzeitbewusstes SCA – beweist, welche CVEs tatsächlich erreichbar sind, nicht nur installiert. VulnReach ist jetzt ein offiziellesOWASP-Projekt. 🎉 Demo Schritt 1 – SCA deckt 74 CVEs in den Abhängigkeiten auf Schritt 2 – VulnReach beweist, welche tatsächlich erreichbar sind...

rev-dep

Rev-dep Funzionalità • Installazione • Documentazione • Toolkit esplorativo • Riferimento CLI Kit di analisi e ottimizzazione delle dipendenze per codebase JavaScript e TypeScript moderni. Applica l'igiene del grafo delle dipendenze e rimuovi il codice inutilizzato con una CLI molto veloce...

DependencyCheck

...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: grafana-operator, flux-kustomize-controller, wave, terraform-provider-google, cosign, step, opencost, sealed-secrets, dbmate, kubernetes-event-exporter, spegel, configmap-reload, gke-gcloud-auth-plugin, thanos-operator, aws-eks-pod-identity-agent, vendir, nuclei, run...

GO-2024-2899 vulnerabilities

Vulnerabilities for packages: pombump, melange...

GO-2026-5381 vulnerabilities

Vulnerabilities for packages: k8sgpt, karma, opentelemetry-operator, opentelemetry-collector-contrib, prometheus-pushgateway, mc, cloud-sql-proxy, certificate-transparency, tempo, amazon-cloudwatch-agent-operator, loki, fluent-bit-plugin-loki, keda, trillian, opentelemetry-collector, telegraf,...

GO-2026-5074 vulnerabilities

Vulnerabilities for packages: gomplate, grafana-alloy, kots, pulumi-language-yaml, kyverno, gptscript, guac, gitaly, osv-scanner, trufflehog, cerbos, pulumi-kubernetes-operator, k9s, act, zarf, argo-workflows, syft, steampipe, skaffold, argo-events, pulumi-language-java, flux-source-controller,...

@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +11 more potentially affected by CVE-2026-55487 via pnpm (>=10.0.0, <=10.33.2)

pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.8, =0.1.0, =2.7.2, =0.0.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-55487 Source advisory: OSV:GHSA-5WX6-MG75-V57R...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.5) +21 more potentially affected by CVE-2026-43527 via openclaw (>=2026.3.22, <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =0.2.18 - @xmoxmo/bncr 0.0.8 - morpho-vault-manager 0.1.0 and more Source cves: CVE-2026-43527 Source advisory: SNYK:JS-OPENCLAW-16420277...

SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for Maven (SUSE-SU-2025:0719-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0719-1 advisory. maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: - Key changes across versions: Bug...

Finding Vulnerabilities in Open Source Projects

The Open Source Security Foundation announced $10 million in funding from a pool of tech and financial companies, including $5 million from Microsoft and Google, to find vulnerabilities in open source projects: The "Alpha" side will emphasize vulnerability testing by hand in the most popular...

Horusec - An Open Source Tool That Improves Identification Of Vulnerabilities In Your Project With Just One Command

Horusec is an open source tool that performs static code analysis to identify security flaws during the development process. Currently, the languages for analysis are: C, Java, Kotlin, Python, Ruby, Golang, Terraform, Javascript, Typescript, Kubernetes, PHP, C, HTML, JSON, Dart. The tool has...