GO-2021-0356 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, dynamic-localpv-provisioner, kubeflow...

GO-2022-0411 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: gitleaks, dynamic-localpv-provisioner, vt-cli, terraform-provider-sendgrid, k3d, hey...

GO-2022-0969 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, wireguard-go, dynamic-localpv-provisioner, terraform-provider-sendgrid, k3d, grpcurl, kubeflow, hey...

GO-2022-0322 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

GO-2022-0603 vulnerabilities

Vulnerabilities for packages: thanos-operator, dynamic-localpv-provisioner...

GO-2022-0968 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, dynamic-localpv-provisioner, kubeflow...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, gitleaks, dynamic-localpv-provisioner, vt-cli, terraform-provider-sendgrid, k3d, grpcurl, kubeflow, hey...

GO-2023-1571 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, restic, wireguard-go, dynamic-localpv-provisioner, gke-gcloud-auth-plugin, terraform-provider-sendgrid, k3d, grpcurl, go, kubeflow, hey...

GO-2022-0493 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, ctop, kind, terraform-provider-sendgrid, k3d, grpcurl, kubeflow...

The vulnerability of the Remote Access Connection Manager (RASMan) service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager RASMan service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the implementation of the Server Message Block (SMBv3) network protocol on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Server Message Block SMBv3 network protocol implementation in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DNS server service in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the DNS server service in Windows operating systems is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

MAL-2026-13949 Malicious code in external-process-live-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b21f410276a5ec436e583a1b0c08aab7f5f977f3868fd742c7a05ab0197751 The package's default export issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/107 with a 'bearrtoken: logo...

MAL-2026-13942 Malicious code in chai-as-reformed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae73388f2a877d421e53b37bdd36496a8048149ffe2e64a975e87c705f8b0e45 The package impersonates chai-as-promised and copies its README from pino, but its exported middleware spawns a detached node lib/caller.js process...

MAL-2026-13944 Malicious code in copytrade-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c8773c5727069f87e54d58cd3679252a90ec0fe3de3a1b4adcb9a3bbff68bd index.js exports a getPlugin function that issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/108, takes the...

MAL-2026-13958 Malicious code in power-assert-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff97d4bae356db6a165ae845ee186c814f89bd1ee40e839d6da054965bfbd823 power-assert-plus is a typosquat of power-assert. On every require, index.js detach-spawns node build/power-assert-plus.js. That build file is...

Malicious code in power-assert-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff97d4bae356db6a165ae845ee186c814f89bd1ee40e839d6da054965bfbd823 power-assert-plus is a typosquat of power-assert. On every require, index.js detach-spawns node build/power-assert-plus.js. That build file is...

CVE-2026-67986

A flaw was found in amazingprint. This vulnerability allows an attacker to inject and execute arbitrary Ruby code within the host process. The flaw occurs when the grep method is called with a block, and a specially crafted method name containing Ruby interpolation syntax is processed. Successful...