31502 matches found
GHSA-XV6W-GXJ8-V943 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-326M-34V3-GV5P vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-6R7G-3MM3-FHW7 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, mountpoint-s3-csi-driver, actions-runner-controller, dgraph, stakater-reloader, flux-image-reflector-controller, flux, aws-network-policy-agent, dkron, external-secrets-operator, metacontroller, polaris,...
GHSA-JRG3-GFJW-HM96 vulnerabilities
Vulnerabilities for packages: kwok, cosign, opensearch-k8s-operator, actions-runner-controller, stakater-reloader, rancher-fleet, litefs, pluto, nodetaint, vexctl, nri-postgresql, memcached-exporter, kubernetes-csi-external-resizer, jitsucom-bulker, hugo-extended, dapr, victoriametrics,...
GHSA-QH3H-3QGQ-CXV8 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: atlas, nemo, newrelic-infra-operator, nodetaint-fips, github-mcp-server, listmonk, flux-source-controller, flux-image-reflector-controller, kyverno-policy-reporter-plugins-kyverno-fips, sftpgo-plugin-eventsearch, smokescreen, sealed-secrets-fips,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: atlas, nemo, newrelic-infra-operator, nodetaint-fips, github-mcp-server, listmonk, flux-source-controller, flux-image-reflector-controller, kyverno-policy-reporter-plugins-kyverno-fips, sftpgo-plugin-eventsearch, smokescreen, sealed-secrets-fips,...
GHSA-FVCV-3M26-PCQX
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw 2026-04-12 07:51:50+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjbulrf7362m 2026-04-12 23:10:48+00:00| seen|...
GHSA-PHFX-PWWG-945V
creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...
CVE-2026-56074
creationtimestamp| type| source ---|---|--- 2026-04-10 19:28:38+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-ffp3-3562-8cv3...
CVE-2026-40148
creationtimestamp| type| source ---|---|--- 2026-04-10 19:26:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f2h6-7xfr-xm8w...
Arbitrary Code Injection
Overview praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents Affected versions of this package are vulnerable to Arbitrary Code Injection in the executecodedirect function when the AST-based filtering mechanism fails to block dangerous attribute access...
CVE-2026-40115
creationtimestamp| type| source ---|---|--- 2026-04-10 19:23:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2xgv-5cv2-47vv...
GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware
ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware...
CVE-2026-35599
creationtimestamp| type| source ---|---|--- 2026-04-10 15:34:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r4fg-73rc-hhh7...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free in the response file processing due to a dangling pointer to freed memory being stored in the global dependfile and later dereferenced after the response-file buffer is freed. An attacker can cause data corruption or...
GHSA-3P68-RC4W-QGX5 vulnerabilities
Vulnerabilities for packages: lerna, opensearch-dashboards, kubeflow-pipelines, prism, saf, kubeflow-centraldashboard, langfuse, nextcloud-server, jitsucom-jitsu, kubeflow-katib...