GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: gitlab-kas, flux-source-controller, gitea, apko, fscrypt, melange, buildkitd, flux-image-automation-controller, zot, prometheus, chezmoi, telegraf, pulumi-kubernetes-operator, argocd-image-updater, cilium-cli, gitlab-runner, aactl, nfpm, k9s, rootlesskit,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: eksctl, gitlab-kas, flux-source-controller, caddy, glab, gitea, apko, flux-notification-controller, fscrypt, melange, crossplane-provider-azure-storage, buildkitd, crossplane-provider-azure-authorization, flux-image-automation-controller, prometheus, age, zot, chezmo...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: spire-server, cilium, witness, gitlab-kas, pulumi-language-dotnet, splunk-otel-collector, flux-source-controller, helm, scorecard, terragrunt, grype, k3s, kots, gptscript, nuclei, istio, falco-no-driver, apko, gitea, opentelemetry-collector, kubernetes, podman,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: apache-nifi, tez, kafka, druid, apache-pulsar, confluent-kafka, zookeeper...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: infinispan, thingsboard, strimzi-kafka-operator, kserve-modelmesh, tez, apache-pulsar, druid, neo4j, apache-nifi-registry, spdx-tools-java, confluent-common-docker, jenkins-plugin-manager, apicurio-registry, ruby3.3-jrjackson, ruby4.0-jrjackson,...

GHSA-68VW-XV3C-52VP vulnerabilities

Vulnerabilities for packages: expat...

GHSA-93QH-VWRM-C5PW vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: infinispan, thingsboard, strimzi-kafka-operator, druid, neo4j, spdx-tools-java, jenkins-plugin-manager, apicurio-registry, ruby3.3-jrjackson, ruby4.0-jrjackson, management-api-for-apache-cassandra-5.0, keycloak, solr, keycloak-config-cli, spark, logstash,...

GHSA-434X-W66G-QW3R

creationtimestamp| type| source ---|---|--- 2026-06-24 21:41:59+00:00| seen| https://gist.github.com/moonpiedumplings/7e71121b76c58ecaba4176be9bb827c4...

GHSA-38CX-CQ6F-5755 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-5RVQ-CXJ2-64VF vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-5W46-G9PQ-WH6F

creationtimestamp| type| source ---|---|--- 2026-06-24 07:42:24+00:00| seen| https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5...

Malicious code in @muaththir/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66954b91179d60bfbf1c18e8ed8ed9e6b12ab7b13bc6ab2a4174c3bf063c2c0a On npm install, the package's preinstall lifecycle hook runs node index.js, which collects host identifiers os.userInfo.username, process.cwd, Node...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, kube-logging-operator, ruby4.0-rails, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, logstash-fips,...

GHSA-RJFV-PJVX-MJGV vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, aws-load-balancer-controller-fips...

GHSA-4XPC-PV4P-PM3W vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-WFQX-GJRF-G28R vulnerabilities

Vulnerabilities for packages: crossplane...

CVE-2026-33684

creationtimestamp| type| source ---|---|--- 2026-06-22 14:00:15+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8j8m-p79x-g4jm...

GHSA-6GQW-JQV7-V88M

creationtimestamp| type| source ---|---|--- 2026-06-22 05:42:09+00:00| seen| https://gist.github.com/alon710/25e5cb1eacfa8b15e8ccfc6978e0021b...

GHSA-X975-RGX4-5FH4

creationtimestamp| type| source ---|---|--- 2026-06-22 04:11:55+00:00| seen| https://gist.github.com/alon710/8de6af61b9d07c38419cacde992ae1f8 2026-06-22 04:21:36+00:00| seen| https://gist.github.com/alon710/5d611a6037648e98f6e55065eed852b3...