8300 matches found
MINI-4JCX-F2QV-4XG6
Bulletin has no description...
CVE-2026-74797
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. Attackers can cause excessive CPU usage by controlling .zip archive content served during dependency installation,...
CVE-2026-74797 OpenTofu before 1.11.4 Denial of Service via malicious zip
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. Attackers can cause excessive CPU usage by controlling .zip archive content served during dependency installation,...
EUVD-2026-59962
OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. Attackers can cause excessive CPU usage by controlling .zip archive content served during dependency installation,...
MINI-8PMC-WG5W-Q8MG
Bulletin has no description...
GHSA-HJCP-JMPX-G3QM vulnerabilities
Vulnerabilities for packages: nrjmx, apicurio-registry, druid, akhq, thingsboard, cassandra-reaper, dependency-track, opensearch...
CVE-2026-64607 vulnerabilities
Vulnerabilities for packages: nrjmx, apicurio-registry, druid, akhq, thingsboard, cassandra-reaper, dependency-track, opensearch...
MINI-6XHJ-W3M4-7WX9
Bulletin has no description...
MINI-2493-G63V-4885
Bulletin has no description...
MINI-CR73-H6XR-97FM
Bulletin has no description...
MINI-JCQ7-2RJV-CMH9
Bulletin has no description...
Malicious code in depcruise-wrap-stream-in-html (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce3c6c9707df3626f30cbf434aa298d1df5cda4cf7b06b76ad4c92d04004a1c [email protected] is a hollow package: index.js is module.exports = and the name mimics an internal helper of dependency-cruiser...
MAL-2026-14068 Malicious code in depcruise-wrap-stream-in-html (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce3c6c9707df3626f30cbf434aa298d1df5cda4cf7b06b76ad4c92d04004a1c [email protected] is a hollow package: index.js is module.exports = and the name mimics an internal helper of dependency-cruiser...
Malicious code in fastly-vcl-language-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f77be5ce1488e7867223b63fd5c90060e98d6a44325ff2f71bed2b61653d649 The package declares scripts.preinstall = 'node vishu.js', which runs unconditionally on npm install. vishu.js fetches the installer's public IP via...
CVE-2026-74307
The CVE-2026-74307 entry describes a Linux kernel/ext4 vulnerability in EXT4_IOC_MOVE_EXT where donor file superblock validation is done late (inside mext_check_validity after acquiring inode locks), creating a deadlock with sb_writers during cross-filesystem donor use (e.g., overlayfs). The issu...
GHSA-XPHW-4F88-5F39 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-evidently, syncthing-fips, litefs-fips, crossplane-provider-aws-dataexchange, git-credential-oauth, rancher-agent, virt-api, net-kourier-fips, crossplane-provider-aws-dsql, crossplane-provider-terraform, crossplane-provider-aws-servicecatalog,...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: k8s-driver-manager-fips, git-credential-oauth, net-kourier-fips, crossplane-provider-aws-dsql, sops-fips, logstash-exporter-fips, databricks-cli, external-dns-fips, omnictl-multiarch-fips, prometheus-node-exporter, crossplane-provider-aws-rolesanywhere-fips,...
GHSA-C974-W86C-VPFW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-evidently, terraform-provider-time-fips, crossplane-provider-aws-dataexchange, rancher-agent, virt-api, blob-csi-fips, net-kourier-fips, crossplane-provider-aws-dsql, crossplane-provider-terraform, crossplane-provider-aws-servicecatalog,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: cilium-cli, nri-redis, hubble, loki, opentelemetry-collector, secrets-store-csi-driver-provider-azure, k9s, kyverno-policy-reporter, argo-workflows, vt-cli, kubernetes-dns-node-cache, runc, step-kms-plugin, terragrunt, kserve-rest-proxy, external-dns,...