5803 matches found
Malicious code in @huobi-ui/activity-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dc07679f0c801fbb465a2502687e29ed687871964c5d84c0dd5f2b7f94e8ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-25FP-8W8P-MX36
creationtimestamp| type| source ---|---|--- 2026-06-29 13:27:42+00:00| seen| https://gist.github.com/zSarix/66a6804b1056cbaf4c2940b8f9808613...
GHSA-37JM-QCW2-GCQG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4GXM-V5V7-FQC4 pnpm: Reserved bin name deletes PNPM_HOME during global remove
Maintainer Action Plan Maintainer Action Plan This report is ready to review with the shared patch branch. Start with the PR and the expected fixed behavior, then use the detailed exploit narrative below only if you want to replay the original path. - Advisory: CAND-PNPM-085 / GHSA-4gxm-v5v7-fqc4...
GHSA-5VC5-WXXQ-3FJX
creationtimestamp| type| source ---|---|--- 2026-06-26 22:48:16+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7znrg3ri2v...
GHSA-RGVG-3WPC-H44P
creationtimestamp| type| source ---|---|--- 2026-06-26 22:07:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7xfcnzpe2s...
GHSA-M2V9-299J-RV96 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-X527-X647-Q7GG vulnerabilities
Vulnerabilities for packages: argocd-image-updater, prometheus, gatekeeper, kyverno, kubernetes-fips, rancher, spire-server, aactl, elastic-agent-fips, argo-workflows-fips, terraform, opentofu, kubevela-fips, external-dns, cilium, kubescape, k9s, tekton-pipelines, upwind-agent, cloudbeat,...
GHSA-45GG-VH54-H5M9 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, prometheus, gatekeeper, kyverno, kubernetes-fips, rancher, spire-server, aactl, elastic-agent-fips, argo-workflows-fips, terraform, opentofu, kubevela-fips, external-dns, cilium, kubescape, k9s, tekton-pipelines, upwind-agent, cloudbeat,...
GHSA-F5WC-C3C7-36MC vulnerabilities
Vulnerabilities for packages: argocd-image-updater, chainloop-cli-fips, nfpm, prometheus, step-ca-fips, terragrunt, gatekeeper, docker-cli-buildx-fips, kubernetes-fips, kyverno, rancher, teleport-operator-fips, spire-server, nuclei, aactl, syft-fips, elastic-agent-fips, argo-workflows-fips,...
GHSA-9CV6-QCJW-4GRX vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset...
GHSA-52X6-GQ3R-VPF4 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-MPWR-8VM7-H73F vulnerabilities
Vulnerabilities for packages: external-secrets-operator, splunk-otel-collector, crossplane-provider-azure-sql, goreleaser, grafana, gobuster, telegraf, crossplane-provider-azure-storage, x509-certificate-exporter, crossplane-provider-azure-authorization, nuclei,...
GHSA-53WW-G6WP-VWP6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VGWF-H737-FF37 vulnerabilities
Vulnerabilities for packages: prometheus-operator, guac, kine, wolfictl, nerdctl, argocd-image-updater, argo-cd, loki, pulumi-language-java, argo-events, syft, spire-server, docker, gomplate, kots, gatus, snyk-cli, cilium, skaffold, nuclei, nfpm, pulumi-language-yaml, minio,...
GHSA-W879-237Q-WC7R vulnerabilities
Vulnerabilities for packages: prometheus-operator, atlantis, crossplane-provider-azure-storage, guac, kine, tkn, wolfictl, buildah, cosign, nerdctl, argocd-image-updater, argo-cd, loki, pulumi-language-java, argo-events, sops, policy-controller, syft, spire-server, docker, gomplate, kots, gatus,...
GHSA-78MQ-XCR3-XM33 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector, pulumi-language-yaml, gptscript, aactl, terragrunt, falco-no-driver, prometheus-operator, apko, k9s, pulumi, grype, chezmoi, gitea, guac, kine, zot, wolfictl, dagger, minio, external-secrets-operator, flux, mattermost, nerdctl,...
GHSA-2R2C-CX56-8933 vulnerabilities
Vulnerabilities for packages: druid, apache-pulsar, apache-nifi, tez, confluent-kafka, kafka, zookeeper...
GHSA-5JMJ-H7XM-6Q6V vulnerabilities
Vulnerabilities for packages: ruby3.4-jrjackson, cassandra-reaper, ruby3.2-jrjackson, ruby4.0-jrjackson, tez, akhq, ruby3.3-jrjackson, kafka, thingsboard, management-api-for-apache-cassandra-5.0, spdx-tools-java, nextflow, keycloak-config-cli, wildfly, cassandra, airflow, apache-nifi-registry,...