GHSA-WM69-2PC3-RMMF

creationtimestamp| type| source ---|---|--- 2026-06-18 17:41:53+00:00| seen| https://gist.github.com/alon710/828a99d5b9580f4196005661c9b07d2d...

@adyen/adyen-salesforce-pwa (>=2.0.0, <=3.0.4), @angular-builders/custom-esbuild (>=18.0.0-beta.3, <=19.1.0) +135 more potentially affected by CVE-2026-55603 via http-proxy-middleware (>=3.0.5, <=3.0.6)

http-proxy-middleware NPM version =3.0.5, =2.0.0, =18.0.0-beta.3, =18.0.0-beta.3, =18.2.6-RC-1, =18.0.0, =18.2.19, =1.0.2, =0.9.1-next.19, =0.9.1-next.19, =0.9.1-next.19, =0.0.4, =3.0.0-alpha-1, =21.2.2-depup.0, =24.3.0-depup.0, =24.11.1-depup.1 and more Source cves: CVE-2026-55603 Source advisor...

GHSA-993G-76C3-P5M4 vulnerabilities

Vulnerabilities for packages: kserve, superset, datadog-agent, ggshield...

GHSA-XGMM-8J9V-C9WX vulnerabilities

Vulnerabilities for packages: kserve, superset, datadog-agent, ggshield...

Vim < 9.2.0597 Code Execution (GHSA-65p9-mwwx-7468)

The version of Vim installed on the remote host is prior to 9.2.0597. It is, therefore, affected by a vulnerability as referenced in the GHSA-65p9-mwwx-7468 advisory. - Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec as part of...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: vault-fips, gitaly, teleport, commercial-grafana, envoy-gateway-fips, vault...

GHSA-Q9J8-24P8-JQ8J vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips, gitlab-cng, gitlab-runner...

GHSA-75HH-423H-RVWG vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-XVMR-9P7M-JMWV vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-HMW2-7CC7-3QXX vulnerabilities

Vulnerabilities for packages: argo-workflows, nextcloud-server, saf, tileserver-gl, kubeflow-pipelines, langfuse, jitsucom-jitsu, lerna, kubeflow-katib, sqlpad, prism, opensearch-dashboards, kubeflow-centraldashboard...

GHSA-HMW2-7CC7-3QXX vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, py3-captum, jitsucom-jitsu, kubeflow-pipelines, kibana, tileserver-gl-fips, langfuse, nextcloud-server, kubeflow-katib, gemini-cli, drupal, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards, pelias-api, saf, tileserver-gl, unleash,...

GHSA-4FVR-RGM6-GQMC vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

GHSA-2FQR-MR3J-6WP8 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

GHSA-4XPC-PV4P-PM3W

creationtimestamp| type| source ---|---|--- 2026-06-17 05:11:40+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mohkg5ewtq2d 2026-07-13 12:32:45+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mqjp6qwla22o...

Malicious code in @mastra/clickhouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea737d5664a4642538e7e34488a6b0a8df3156828a62e33ada84544a33b214b5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

GHSA-X746-7M8F-X49C vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, nemo...

CVE-2026-55091

creationtimestamp| type| source ---|---|--- 2026-06-16 22:51:04+00:00| published-proof-of-concept| https://github.com/joaonuno/flat-to-nested-js/security/advisories/GHSA-hp36-v28f-w3r4...

GHSA-69QJ-PVH9-C5WG

creationtimestamp| type| source ---|---|--- 2026-06-16 22:41:17+00:00| seen| https://gist.github.com/alon710/2d3358848147c1728694a3629d631316 2026-06-16 23:01:53+00:00| seen| https://gist.github.com/alon710/67012fd2d01a0b46570236682933fc3c...

GHSA-7CX2-G3H9-382P

creationtimestamp| type| source ---|---|--- 2026-06-16 21:41:28+00:00| seen| https://gist.github.com/alon710/d499538761d587fbb74d51e5882b31ec...

GHSA-4FVR-RGM6-GQMC vulnerabilities

Vulnerabilities for packages: airflow-core, apache-beam-python-3.12-sdk, py3-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, awx, mlflow-fips, open-webui, lmcache-cuda-12.8, authentik, py3-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp, text-generation-inference,...