5086 matches found
GHSA-9XWC-HFWC-8W59
creationtimestamp| type| source ---|---|--- 2025-12-18 14:34:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115741064492295251 2026-04-14 17:27:49+00:00| seen| Telegram/X69Hoh64i7djUBejuAQijXCf66JncuFnYRKez2YtZF33U...
EUVD-2025-204011
Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be passed to origin servers. This means malicious users can create an origin server on a compute node that record these headers when unsuspecting users connect to...
GHSA-R7V6-MFHQ-G3M2
creationtimestamp| type| source ---|---|--- 2025-12-16 13:41:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729529089646381 2026-01-02 18:47:00+00:00| published-proof-of-concept| Telegram/909Vqfy1t-GN-jmnJRhonTHruzsnwKWBWvcbC9dRm7P3pmc...
GHSA-CPWW-GWGC-P72R
creationtimestamp| type| source ---|---|--- 2025-12-16 13:38:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729519990865426 2026-01-07 21:06:23+00:00| published-proof-of-concept| Telegram/i8bForBP1dZBDut81Rl3-X-SxUGQomBUf7AnX6qGlfBFF0o...
GHSA-W37M-7FHW-FMV9 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
Malicious code in phx-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b09229dc15cf8c3ce04a8a0a7e5cb43d43587ada9469f2a238c46a52927f94d The package phx-core was found to contain malicious code. Source: ghsa-malware 44cd2845eda5ed69922e3450a19b821ff762b61ea14e981648e9637faafcee3d Any...
Malicious code in gfruitmaliciousxmlparser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813943ebd3c7e53be5309757e509dc22587aab81ded149ba9b56b37e87a4dd9 The package gfruitmaliciousxmlparser was found to contain malicious code. Source: ghsa-malware...
@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +155 more potentially affected by unknown CVE via next (>=16.0.0, <=16.0.8)
next NPM version =16.0.0, =1.0.0, =0.3.128, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.9.58-canary.1, =0.1.0, =1.0.4186, =0.1.0, =0.1.0, =0.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MWV6-3258-Q52C...
@adenta/cms (>=0.0.6, <=1.1.1-0), @alisonquinter17/alieta-ui (0.1.0) +126 more potentially affected by unknown CVE via next (>=15.4.0-canary.17, <=15.4.8)
next NPM version =15.4.0-canary.17, =0.0.6, =0.1.0, =1.2.4-main.7f918ee.29, =0.2.0, =1.0.0, =1.0.0-beta.3, =1.0.2, =0.0.1, =0.0.4, =0.0.1, =1.1.0, =0.1.3, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MWV6-3258-Q52C...
GHSA-J8G6-5GQC-MQ36
creationtimestamp| type| source ---|---|--- 2025-12-11 17:17:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115702068572706362...
GHSA-M7F9-QW7F-WHP3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MR6F-H57V-RPJ5
creationtimestamp| type| source ---|---|--- 2025-12-10 22:38:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115697668298607011...
GHSA-XRQC-7XGX-C9VH vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows-fips, argo-workflows...
GHSA-HXP3-63HC-5366
creationtimestamp| type| source ---|---|--- 2025-12-09 21:49:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691812757707363...
GHSA-XRQC-7XGX-C9VH
creationtimestamp| type| source ---|---|--- 2025-12-09 20:55:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691600473250373...
GHSA-2XPW-W6GG-JR37 vulnerabilities
Vulnerabilities for packages: az, semgrep, nvidia-nsight-compute-13.3, kubeflow-pipelines, dask-kubernetes, kubeflow-jupyter-web-app, openstack-kolla-toolbox-2025.2, ggshield, azure-functions-host, openstack-kolla-toolbox-2025.2-fips, nemo, datadog-agent, jupyter-base-notebook, pgadmin4,...
GHSA-9QR9-H5GF-34MP vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse...
GHSA-4F99-4Q7P-P3GH vulnerabilities
Vulnerabilities for packages: go-discover, terraform-provider-google, aws-flb-cloudwatch, neuvector-dbgen, sonobuoy, gostatsd, src-fingerprint, aws-flb-kinesis, aws-flb-firehose, hello-world-golang, kpt, smokescreen, newrelic-nri-statsd, docker-credential-gcr, php-fpmexporter, kubeflow,...
GHSA-F83F-XPX7-FFPW vulnerabilities
Vulnerabilities for packages: zarf, cosign, tekton-chains, portieris-fips, sigstore-scaffolding-fips, podman, ratify, falcoctl, falcoctl-fips, portieris, prometheus-podman-exporter, flux-source-controller-fips, kyverno-notation-aws, chainctl, cosign-fips, gitsign, prometheus-podman-exporter-fips,...