1847 matches found
CLSA-2026-1787144764 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.1...
Malicious code in @milleree/date-display (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d2c195a06ca2577f279d5ec0939d9d958086f361f147e08b200c28786f776ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Achievement Unlocked: Let'S Get Hacked! an Empirical Study of Cybercrime in the Video Gaming Ecosystem
The ubiquity of the video game industry and its large user base have transformed video games into complex social and economic ecosystems. Unfortunately, this growing popularity also attracts cybercriminals who deliberately exploit game-specific mechanisms to target players. Despite this growing...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +292 more potentially affected by unknown CVE via vm2 (>=3.0.0, <=3.11.5)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves: unknown CVE...
Spring Office Hours Podcast: S5E20 - The Developer's Guide to AI with Danny Thompson
Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by Danny Thompson, Senior Developer Advocate at Atlassian, co-host of The Programming Podcast, and founder of The Commit Your Code Conference. Danny is also a co-author o...
CVE-2026-18165
creationtimestamp| type| source ---|---|--- 2026-08-15 13:48:50+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mt4st6feps2i...
DEBIAN-CVE-2026-68463
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pmruntimeresumeandget in suspend Replace pmruntimegetsync with pmruntimeresumeandget to simplify error handling. pmruntimeresumeandget automatically drops the usage counter on failure, avoiding the need...
GO-2026-5287 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
GO-2026-5371 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno-notation-aws-fips...
GO-2023-1840 vulnerabilities
Vulnerabilities for packages: kind, policy-controller, kubeflow-katib...
GO-2026-5676 vulnerabilities
Vulnerabilities for packages: traefik, dkron-fips, kargo, spegel, frp, eks-distro-fips, commercial-expanso-edge, kubernetes-dns-node-cache, kubernetes-dns-node-cache-fips, kyverno-policy-reporter-plugins-trivy-fips, mediamtx, k8sgateway-fips, opentelemetry-operator, rke2-runtime,...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, dapr-fips, witness, kyverno, spire-server, conftest, kyverno-notation-aws-fips, trivy-fips, policy-controller-fips, cosign, tfsec, kyverno-fips, conftest-fips, spire-server-fips, cosign-fips, dapr, policy-controller, trivy, kots...
GO-2025-4245 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, kserve, grafana-alloy, opentelemetry-collector, argo-rollouts-fips, kargo, datadog-agent-fips, eks-distro-fips, k8sgateway-fips, nats, argo-cd-fips, rke2-runtime, verticadb-operator-fips, kine, amazon-cloudwatch-agent, nats-fips, elastic-agent-fip...
GO-2025-3830 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, grype, cg, beats-fips, kargo, melange, grype-fips, chainctl, cadvisor-fips, docker-compose, falcoctl, cadvisor, apko-fips, spire-server, trufflehog, tw, goreleaser, falcoctl-fips, openfga-fips, wolfictl, trufflehog-fips, prometheus-fips,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: vexctl, rekor, gitsign, oauth2-proxy, fulcio, sops, tkn, spire-server, falcoctl-fips, bank-vaults-fips, terragrunt, aactl, cosign, dex, flux-source-controller, kubescape, timestamp-authority-fips, cloudflared, slsa-verifier, spire-server-fips, cosign-fips,...
GO-2026-4529 vulnerabilities
Vulnerabilities for packages: vexctl, kyverno-notation-aws, tkn, trivy-operator-fips, cloudbeat, kyverno, tekton-chains-fips, ratify-fips, crossplane-fips, zot, ko, kyverno-notation-aws-fips, teleport, trivy-fips, kyverno-policy-reporter-plugins-kyverno-fips, commercial-chainloop-backend,...
GO-2026-4971 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-aws-fips, grpcurl-fips, harbor-registry-fips, atlantis-fips, crossplane-provider-azure-relay, kserve-localmodelnode-agent, crossplane-provider-aws-elb-fips, nri-mongodb-fips, cert-manager-csi-driver, knative-operator-fips,...
GO-2024-3107 vulnerabilities
Vulnerabilities for packages: gobump, crossplane-provider-azure-sql, direnv, harbor-registry-fips, atlantis-fips, crossplane-provider-aws-elasticache, crossplane-provider-gcp, nri-mssql, harbor-registry, cfssl, nri-mongodb, kubernetes-ingress-defaultbackend, kube-logging-operator, chartmuseum-fip...
