Malicious code in resolve-audit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b902b4dc4c2187bb95548ed903dfea70ea626ba5450f031c2cb27b3639dd1c [email protected] is a stub package index exports an empty object whose package.json declares its only dependency ltidisafe as a direct HTTPS...

CVE-2026-73415 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-73502 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-netapp, crossplane-provider-aws-dynamodb, crossplane-provider-aws-mediastore, crossplane-provider-aws-monolith, hugo, crossplane-provider-aws-quicksight, crossplane-provider-aws-vpclattice, crossplane-provider-aws-autoscalingplans,...

Malicious code in fmt-util-k7x2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8613ffc5393a31685344c247925a5ef104f7daf3f0d2f45a51918adba7d344 [email protected] advertises itself as a trivial string-formatting utility index.js exports two-line pad/trim helpers, but its package.json declare...

MAL-2026-13950 Malicious code in fmt-util-k7x2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8613ffc5393a31685344c247925a5ef104f7daf3f0d2f45a51918adba7d344 [email protected] advertises itself as a trivial string-formatting utility index.js exports two-line pad/trim helpers, but its package.json declare...

CVE-2026-58438

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...

CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...

CVE-2026-58438

CVE-2026-58438 concerns Gitea: a Cross-repository IDOR in issue-dependency removal. The root cause is that RemoveDependency fetches the dependency by ID and deletes the relation, with no cross-repo permission check, potentially allowing an attacker to delete an issue dependency and append a remov...

CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...

UBUNTU-CVE-2026-6470

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...

CVE-2026-6470

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...

EUVD-2026-57856

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...

CLEANSTART-2026-ZL34069 Security fixes in cortex 1.20.1-r2

Package cortex version 1.20.1-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-TD64731 Security fixes in fulcio 1.8.7-r2

Package fulcio version 1.8.7-r2 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CLEANSTART-2026-EU00318 Security fixes in argo-workflows 3.7.17-r1

Package argo-workflows version 3.7.17-r1 fixes 16 vulnerabilities: ghsa-3ppc-4f35-3m26, ghsa-7r86-cg39-jmmj, ghsa-23c5-xmqv-rm74, ghsa-xv26-6w52-cph6, ghsa-q3j6-qgpj-74h6...

CLEANSTART-2026-ES11075 Security fixes in argo-events 1.9.10-r1

Package argo-events version 1.9.10-r1 fixes 17 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33186, ghsa-mh2q-q3fh-2475, CVE-2026-29181...

CLEANSTART-2026-TQ54429 Security fixes in kube-logging-operator 6.7.0-r2

Package kube-logging-operator version 6.7.0-r2 fixes 9 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-44024, CVE-2026-44025, CVE-2026-44160...

CLEANSTART-2026-OI56852 Security fixes in spark-sc213-jdk17-py312 3.4.4-r1

Package spark-sc213-jdk17-py312 version 3.4.4-r1 fixes 26 vulnerabilities: CVE-2024-47561, ghsa-rhrv-645h-fjfh, CVE-2023-39410, ghsa-r7pg-v2c8-mfg3, CVE-2024-7254...

CLEANSTART-2026-KJ21484 Security fixes in argo-events 1.6.3-r1

Package argo-events version 1.6.3-r1 fixes 9 vulnerabilities: CVE-2022-1996, ghsa-r48q-9g5r-8q2h, ghsa-p77j-4mvh-x3m3, ghsa-m425-mq94-257g, CVE-2026-33186...

CLEANSTART-2026-IF32046 Security fixes in local-static-provisioner 2.6.0-r1

Package local-static-provisioner version 2.6.0-r1 fixes 18 vulnerabilities: ghsa-7fxm-f474-hf8w, ghsa-q78c-gwqw-jcmc, CVE-2023-3676, CVE-2023-3955, ghsa-hq6q-c2x6-hmch...