GHSA-68VW-XV3C-52VP vulnerabilities

Vulnerabilities for packages: expat...

GHSA-93QH-VWRM-C5PW vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: infinispan, thingsboard, strimzi-kafka-operator, druid, neo4j, spdx-tools-java, jenkins-plugin-manager, apicurio-registry, ruby3.3-jrjackson, ruby4.0-jrjackson, management-api-for-apache-cassandra-5.0, keycloak, solr, keycloak-config-cli, spark, logstash,...

GHSA-434X-W66G-QW3R

creationtimestamp| type| source ---|---|--- 2026-06-24 21:41:59+00:00| seen| https://gist.github.com/moonpiedumplings/7e71121b76c58ecaba4176be9bb827c4...

GHSA-38CX-CQ6F-5755 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-5RVQ-CXJ2-64VF vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-5W46-G9PQ-WH6F

creationtimestamp| type| source ---|---|--- 2026-06-24 07:42:24+00:00| seen| https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5...

Malicious code in @muaththir/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66954b91179d60bfbf1c18e8ed8ed9e6b12ab7b13bc6ab2a4174c3bf063c2c0a On npm install, the package's preinstall lifecycle hook runs node index.js, which collects host identifiers os.userInfo.username, process.cwd, Node...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, kube-logging-operator, ruby4.0-rails, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, logstash-fips,...

GHSA-RJFV-PJVX-MJGV vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, aws-load-balancer-controller-fips...

GHSA-4XPC-PV4P-PM3W vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-WFQX-GJRF-G28R vulnerabilities

Vulnerabilities for packages: crossplane...

CVE-2026-33684

creationtimestamp| type| source ---|---|--- 2026-06-22 14:00:15+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8j8m-p79x-g4jm...

GHSA-6GQW-JQV7-V88M

creationtimestamp| type| source ---|---|--- 2026-06-22 05:42:09+00:00| seen| https://gist.github.com/alon710/25e5cb1eacfa8b15e8ccfc6978e0021b...

GHSA-X975-RGX4-5FH4

creationtimestamp| type| source ---|---|--- 2026-06-22 04:11:55+00:00| seen| https://gist.github.com/alon710/8de6af61b9d07c38419cacde992ae1f8 2026-06-22 04:21:36+00:00| seen| https://gist.github.com/alon710/5d611a6037648e98f6e55065eed852b3...

GHSA-MH64-PH39-MRC9

creationtimestamp| type| source ---|---|--- 2026-06-21 20:11:16+00:00| seen| https://gist.github.com/alon710/c5b3f5c6eff1ab2b8225ee8d2a46e1e8...

GHSA-J496-CRGH-34MX

creationtimestamp| type| source ---|---|--- 2026-06-20 15:24:39+00:00| seen| https://gist.github.com/blessingblockchain/45445c4e5d457c9c5d721a5fc93ad073...

GHSA-4XGF-CPJX-PC3J

creationtimestamp| type| source ---|---|--- 2026-06-20 14:29:23+00:00| seen| https://gist.github.com/konard/4b48b247d88d1fe3f1e7f6cd34987449...

GHSA-CF98-J28V-49V6 vulnerabilities

Vulnerabilities for packages: grafana...

@kozou/api (>=1.0.0, <=1.8.0), @kozou/codegen (>=1.0.0, <=1.8.0) +5 more potentially affected by unknown CVE via @kozou/core (>=1.0.0, <=1.8.0)

@kozou/core NPM version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.7.0, =1.0.0, =1.8.0 Source cves: unknown CVE Source advisory: OSV:GHSA-V52W-28XH-V562...