GHSA-F6F8-9MX6-9MX2 vulnerabilities

Vulnerabilities for packages: py3-django...

GHSA-447R-WPH3-92PM vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap, dotnet...

GHSA-74R5-G7VC-J2V2 vulnerabilities

Vulnerabilities for packages: zola...

GHSA-XRV3-JMCP-374J vulnerabilities

Vulnerabilities for packages: zola...

GHSA-H658-QQV9-QWV8 vulnerabilities

Vulnerabilities for packages: apache-nifi...

GHSA-94W9-97P3-P368

creationtimestamp| type| source ---|---|--- 2024-07-08 04:00:53+00:00| published-proof-of-concept| Telegram/lg9QsFi1Spa8jVI4aQSjOJlRVF7F9piakbWtsvMncKspuNm7rA...

GHSA-XR7Q-JX4M-X55M vulnerabilities

Vulnerabilities for packages: conftest, sigstore-scaffolding, opa, k8sgpt, smarter-device-manager, terraform-provider-google, terragrunt, cert-manager-cmctl, spegel, minio, pulumi-language-dotnet, k3s, kubernetes-csi-driver-hostpath, vcluster, osv-scanner, guac, k3d, kargo, dex, dagger,...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, confluent-docker-utils, mlflow, py3-cassandra-medusa, py3-pipenv, jwt-tool, kubeflow-volumes-web-app, patroni, az, kubeflow-pipelines-visualization-server, k8s-sidecar, kubeflow-katib, superset, checkov, airflow, kubeflow-jupyter-web-app, reflex,...

CVE-2024-39691 Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to

matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when...

MAL-2024-7417 Malicious code in sxrcan.db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52d97df38975017450c84c37fed1e1e2fa954806ad33dca948863e0b9f8bea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7216 Malicious code in @zitterorg/glowing-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0162b1774ad67169d41ad942968302719cc24f0adb033712abf6f04cc21be476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/illum-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd15ba0019e3a1a688c4a7f881d55ebba37d8b7e19fc1b2a8c4f55856c93798f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7153 Malicious code in @zitterorg/delectus-nisi-impedit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11d58d4dae8a215328bf741a8a7e1536e377015a4e17c7e2655f122feaf85623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7275 Malicious code in @zitterorg/minus-quos-velit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de075455c773539bac895720146c3348799fd1b4d9efd3e4327fdd874ce58daf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7396 Malicious code in @zitterorg/unde-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b3e65cb678701847758da7b0764303f2c3157d57d8ea4abc128ab3d0e86120 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7314 Malicious code in @zitterorg/officia-hic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b06185423c55d04c654ba912bafc3e95489fec1a1166d0a061e27cf1c5d886d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7307 Malicious code in @zitterorg/occaecati-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cc5633462169c5c0ec6ce525751d1502c85d758e68eea22a3c8aa0805da1f14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/animi-atque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bff47d10c9af123dfcc2abbe3f48d465fd58e20540067799676986cf054b2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quasi-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20f6a4592f0557258ab1a57552b4a83fbe1cf605de22c693c05db453403fddd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7249 Malicious code in @zitterorg/iure-ut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b2170f149d21f866d54349ef263448c78835df3badc0ca76d3f9a08b0bb4062 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...