GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, gostatsd, git-credential-oauth, kaf, spire-controller-manager, rclone, ctop, nri-f5, postgres-operator, harbor-scanner-trivy, gatekeeper, cluster-api-ipam-provider-in-cluster, gitaly, telegraf, kafka-proxy, apache-exporter, cert-exporter,...

GHSA-QH3H-3QGQ-CXV8 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: flux, actions-runner-controller-fips, pgwatch, flux-operator, victoriametrics-cluster-fips, supercronic-fips, dbmate, nemo, osv-scanner, karpenter, victoriametrics-fips, oras-fips, flux-operator-fips, grafana-operator, aws-load-balancer-controller, gh,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux, actions-runner-controller-fips, pgwatch, flux-operator, victoriametrics-cluster-fips, supercronic-fips, dbmate, nemo, osv-scanner, karpenter, victoriametrics-fips, oras-fips, flux-operator-fips, grafana-operator, aws-load-balancer-controller, gh,...

GHSA-FVCV-3M26-PCQX

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw 2026-04-12 07:51:50+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjbulrf7362m 2026-04-12 23:10:48+00:00| seen|...

GHSA-PHFX-PWWG-945V

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...

CVE-2026-40148

creationtimestamp| type| source ---|---|--- 2026-04-10 19:26:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f2h6-7xfr-xm8w...

Arbitrary Code Injection

Overview praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents Affected versions of this package are vulnerable to Arbitrary Code Injection in the executecodedirect function when the AST-based filtering mechanism fails to block dangerous attribute access...

CVE-2026-40115

creationtimestamp| type| source ---|---|--- 2026-04-10 19:23:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2xgv-5cv2-47vv...

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware...

CVE-2026-35599

creationtimestamp| type| source ---|---|--- 2026-04-10 15:34:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r4fg-73rc-hhh7...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the response file processing due to a dangling pointer to freed memory being stored in the global dependfile and later dereferenced after the response-file buffer is freed. An attacker can cause data corruption or...

GHSA-3P68-RC4W-QGX5 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, lerna, prism, kubeflow-centraldashboard, saf, kubeflow-pipelines, langfuse...

GHSA-P9FF-H696-F583 vulnerabilities

Vulnerabilities for packages: vitess, vite...

GHSA-V7PX-3835-7GJX

creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:43+00:00| seen| Telegram/1cCualjPQDoYUsDnolnQpk7NGC4b1xwJPWps9hRWMxLLCE...

GHSA-JHXM-H53P-JM7W

creationtimestamp| type| source ---|---|--- 2026-04-09 21:22:00+00:00| seen| Telegram/6RgwCZFc4Ae1eVERGO141ZaFCzdAoL4kSRzFJKo9cZLKyo...

GHSA-XRW6-GWF8-VVR9

creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ...

CVE-2026-40077

creationtimestamp| type| source ---|---|--- 2026-04-09 17:40:19+00:00| published-proof-of-concept| https://github.com/henrygd/beszel/security/advisories/GHSA-5f5r-95pg-xrpm...

CVE-2026-35040

creationtimestamp| type| source ---|---|--- 2026-04-09 12:50:48+00:00| published-proof-of-concept| https://github.com/nearform/fast-jwt/security/advisories/GHSA-3j8v-cgw4-2g6q...

Panic when lifting `flags` component value

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m758-wjhj-p3jq For more information see the GitHub-hosted security advisory...