GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: mattermost-fips, gitea-fips, etcd-fips, flux-fips, flux, osv-scanner, seaweedfs-rocksdb, kubescape-server, knative-serving-fips, aactl, external-secrets-operator, nerdctl, vitess, k3s, gitlab-workhorse-ce-fips, prometheus-mongodb-exporter, frankenphp-8.5,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: mattermost-fips, gitea-fips, etcd-fips, argo-events-fips, terraform-fips, flux-fips, flux, pulumi, osv-scanner, kubescape-server, knative-serving-fips, aactl, external-secrets-operator, nerdctl, vitess, scorecard, cg, docker-cli-buildx, k3s, gitlab-workhorse-ce-fips,...

GHSA-9CV6-QCJW-4GRX vulnerabilities

Vulnerabilities for packages: ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...

GHSA-52X6-GQ3R-VPF4 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: cert-manager, crossplane-provider-azure-managedidentity, gobuster, x509-certificate-exporter, nfpm, telegraf, crossplane-provider-azure-storage, goreleaser, grafana, external-secrets-operator, splunk-otel-collector, nuclei, crossplane-provider-azure-sql,...

GHSA-53WW-G6WP-VWP6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: cert-manager, knative-serving, k3s, flux-source-controller, nerdctl, chisel, external-secrets-operator, istio, prometheus-operator, pulumi-kubernetes-operator, wal-g, opentelemetry-collector, docker-machine-driver-harvester, rancher-machine, kaf, prometheus,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: cert-manager, knative-serving, cosign, flux-source-controller, k3s, nerdctl, chisel, policy-controller, external-secrets-operator, istio, prometheus-operator, pulumi-kubernetes-operator, wal-g, opentelemetry-collector, age, slsa-verifier,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: osv-scanner, cert-manager, fscrypt, k3s, flux-source-controller, knative-serving, nerdctl, nfpm, cilium-cli, external-secrets-operator, istio, prometheus-operator, pulumi-kubernetes-operator, opentelemetry-collector, opentofu, pulumi-language-java, dagger, gomplate,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: apache-nifi, tez, confluent-kafka, druid, apache-pulsar, zookeeper, kafka...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: ruby3.3-jrjackson, ruby3.4-jrjackson, gradle, apache-nifi, scala, confluent-kafka, neo4j, akhq, dependency-track, cassandra, keycloak-config-cli, management-api-for-apache-cassandra-5.0, zookeeper, confluent-common-docker, spark, zipkin, wavefront-proxy,...

GHSA-68VW-XV3C-52VP vulnerabilities

Vulnerabilities for packages: expat...

GHSA-93QH-VWRM-C5PW vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: ruby3.3-jrjackson, ruby3.4-jrjackson, jenkins-plugin-manager, scala, neo4j, confluent-kafka, akhq, dependency-track, keycloak-config-cli, cassandra, management-api-for-apache-cassandra-5.0, spark, flyway, druid, apache-tika, kafka, sonarqube, opensearch,...

GHSA-434X-W66G-QW3R

creationtimestamp| type| source ---|---|--- 2026-06-24 21:41:59+00:00| seen| https://gist.github.com/moonpiedumplings/7e71121b76c58ecaba4176be9bb827c4...

GHSA-38CX-CQ6F-5755 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-5RVQ-CXJ2-64VF vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-5W46-G9PQ-WH6F

creationtimestamp| type| source ---|---|--- 2026-06-24 07:42:24+00:00| seen| https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5...

Malicious code in @muaththir/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66954b91179d60bfbf1c18e8ed8ed9e6b12ab7b13bc6ab2a4174c3bf063c2c0a On npm install, the package's preinstall lifecycle hook runs node index.js, which collects host identifiers os.userInfo.username, process.cwd, Node...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, logstash, ruby3.4-rails, logstash-fips, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-rails, ruby3.4-fluentd-kubernetes-daemonset,...