CVE-2026-73621

A flaw was found in GitPython. An argument injection vulnerability in the Commit.count method allows an attacker to control options passed to the method. By supplying a crafted output option, an attacker can cause the git rev-list command to truncate an arbitrary file to zero bytes. This enables...

CVE-2026-73623

A flaw was found in GitPython. An incomplete denylist in the unsafegitcloneoptions function fails to restrict the --template option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations...

CVE-2026-73624

A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the Diffable.diff method, an attacker can supply a malicious output argument to write patch content to attacker-controlled...

CVE-2026-73622

A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted...

CVE-2026-73625

A flaw was found in GitPython. Attackers can bypass the checkunsafeoptions guard by smuggling git options within single-character keyword argument kwarg values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as clonefrom or fetch, leading to...

CVE-2026-73620

A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

CVE-2026-53365 Donate Support the maintenance of this pro...

privil_edge

priviledge !CIhttps://github.com/Ianemwel679/priviledge...

Exploit for Improper Authorization in Microsoft

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos E...

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: vexctl, crossplane-provider-aws-codestarnotifications, osv-scanner, kubevirt-cdi-apiserver, docker-credential-ecr-login, telegraf, crossplane-provider-aws-mwaa, percona-server-mongodb-operator-fips, request-1279-14, helm-operator-fips, open-cluster-management,...

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: vexctl, crossplane-provider-aws-codestarnotifications, osv-scanner, kubevirt-cdi-apiserver, docker-credential-ecr-login, telegraf, crossplane-provider-aws-mwaa, percona-server-mongodb-operator-fips, request-1279-14, helm-operator-fips, open-cluster-management,...

MAL-2026-14031 Malicious code in datefmt-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360a94a10ce13edded9e4a99c7c01de1ebfdd73a9af4ec49260f2cec165a609b The package advertises itself as a date-formatting utility but ships a postinstall.js that npm auto-executes on install via scripts.postinstall...

Malicious code in datefmt-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360a94a10ce13edded9e4a99c7c01de1ebfdd73a9af4ec49260f2cec165a609b The package advertises itself as a date-formatting utility but ships a postinstall.js that npm auto-executes on install via scripts.postinstall...

Malicious code in datefmt-simple-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc0c1f9cc25265504ab10c2634c3ea17e4028ff8412d4d7f4b22c41c33c3c9 datefmt-simple-utils presents itself as a date-formatting utility, but its package.json declares scripts.postinstall="node postinstall.js", which fir...

MAL-2026-14032 Malicious code in datefmt-simple-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc0c1f9cc25265504ab10c2634c3ea17e4028ff8412d4d7f4b22c41c33c3c9 datefmt-simple-utils presents itself as a date-formatting utility, but its package.json declares scripts.postinstall="node postinstall.js", which fir...

ejpt-mission-framework-poc

eJPT Mission Framework An evidence-backed Markdown workflow f...

VulnScope

VulnScope POC Proof of Concept Vulnerability Verificati...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, knative-serving-fips, rke2-runtime, osv-scanner, tekton-pipelines, influx, cloud-provider-azure-fips, azuredisk-csi-fips, beats-fips, gitlab-workhorse-ce, gofumpt, kube-arangodb, loki-fips, mage, neuvector, telegraf, prometheus-operato...

GO-2026-4868 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, knative-serving-fips, rke2-runtime, osv-scanner, tekton-pipelines, influx, cloud-provider-azure-fips, azuredisk-csi-fips, beats-fips, gitlab-workhorse-ce, gofumpt, kube-arangodb, loki-fips, mage, neuvector, telegraf, prometheus-operato...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: external-secrets-operator-fips, vexctl, node-feature-discovery-fips, x509-certificate-exporter-fips, cloud-provider-azure-fips, gitlab-workhorse-ce, velero-plugin-for-aws, mage, timescaledb-parallel-copy, prometheus-mongodb-exporter, docker-credential-ecr-login,...