GHSA-H526-WF6G-67JV

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:28+00:00| seen| https://gist.github.com/alon710/a66372bb9cb505e715583f08653318f8...

GHSA-JH7P-QR78-84P7

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:23+00:00| seen| https://gist.github.com/alon710/53ef3cf299982796039e042072a8e56e...

GHSA-94C7-G2FJ-7682

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:19+00:00| seen| https://gist.github.com/alon710/bad197ef30faed7c7766bf7208bc5e24 2026-01-24 22:22:02+00:00| seen| https://gist.github.com/alon710/080924ff48eead208c4186ef82e51189 2026-01-24 22:22:05+00:00| seen|...

GHSA-95C6-P277-P87G

creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:06+00:00| seen| https://gist.github.com/alon710/a2926998ce57c9024043f9a09fd523b0 2026-01-24 22:20:02+00:00| seen| https://gist.github.com/alon710/b660f58aa4c305563cea5424b15ad791 2026-01-24 22:20:04+00:00| seen|...

GHSA-RQ6Q-WR2Q-7PGP

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:58+00:00| seen| https://gist.github.com/alon710/95646488f16d926a9285cc4a529b9663 2026-01-24 22:19:14+00:00| seen| https://gist.github.com/alon710/051896da1df2ef30fd27ece334001d8c 2026-01-24 22:19:16+00:00| seen|...

GHSA-XJHM-GP88-8PFX

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:54+00:00| seen| https://gist.github.com/alon710/90ad92a146ef16984ad73cdc699140c7 2026-01-24 22:18:56+00:00| seen| https://gist.github.com/alon710/999da6e47862ba22114494b09c546c7d 2026-01-24 22:18:59+00:00| seen|...

GHSA-7JXJ-RPX7-PH2C

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:33+00:00| seen| https://gist.github.com/alon710/be5bed867a7a74a3502ab74ecb972384 2026-01-24 22:17:04+00:00| seen| https://gist.github.com/alon710/59dbc024d388f24e75ae769d8151f5ce 2026-01-24 22:17:07+00:00| seen|...

GHSA-MXC8-4JQF-368Q

creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:17+00:00| seen| https://gist.github.com/alon710/538f3bbaec01e73a79181c8d943a0a8b...

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT. "The attack begins with social engineering lures delivered via business-themed documents crafted to appear routine and benign," Fortinet FortiGuard Labs...

CVE-2026-0756

github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of github-kanban-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw...

K000159681: Credential harvesting campaign targeting F5 VPN users

On January 13, 2026, researchers identified a large-scale credential harvesting campaign targeting several VPN providers, including F5. The threat actors behind the campaign registered numerous doppelgänger domains designed to mimic legitimate F5 domains. These domains are used to deceive victims...

GHSA-FCV2-XGW5-PQXF vulnerabilities

Vulnerabilities for packages: podman, aactl, xeol, kyverno, fulcio, goreleaser, trivy-operator, tflint, policy-controller, skaffold, kots, undock, crossplane, gitsign, rekor, guac, buildkitd, vexctl, kyverno-notation-aws, falco-no-driver, falcoctl, witness, ko, sigstore-scaffolding, spire-server,...

CVE-2026-24117 vulnerabilities

Vulnerabilities for packages: aactl, kyverno, goreleaser, trivy-operator, tflint, policy-controller, skaffold, crossplane, gitsign, buildkitd, vexctl, kyverno-notation-aws, witness, falcoctl, ko, spire-server, kubescape, cosign, zot, slsa-verifier, zarf, ratify, teleport, tkn, tekton-chains,...

GHSA-GJ5H-7FQ5-56P5 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-aws, linux-gcp, linux-azure...

GHSA-84X2-RFRF-6F2C vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-aws, linux-gcp, linux-azure...

GHSA-59F6-F4PC-WW92 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-aws, linux-gcp, linux-azure...

CVE-2026-24137 vulnerabilities

Vulnerabilities for packages: crossplane-fips, podman-fips, crossplane, prometheus-podman-exporter, docker-compose-fips, tflint, trivy-fips, xeol, policy-controller-fips, tekton-chains-fips, buildkitd, kyverno-notation-aws, cloudbeat, kyverno-policy-reporter-plugins-kyverno-fips, portieris-fips,...

CVE-2026-23831 vulnerabilities

Vulnerabilities for packages: crossplane-fips, trivy-operator-fips, chainctl, crossplane, tflint, tflint-fips, policy-controller, trivy-fips, ko-fips, policy-controller-fips, tekton-chains-fips, buildkitd, trivy, image-factory, buildkitd-fips, slsa-verifier, cg, cloudbeat, kubescape,...

GHSA-FCV2-XGW5-PQXF vulnerabilities

Vulnerabilities for packages: crossplane-fips, podman-fips, crossplane, prometheus-podman-exporter, docker-compose-fips, tflint, trivy-fips, xeol, policy-controller-fips, tekton-chains-fips, buildkitd, kyverno-notation-aws, cloudbeat, kyverno-policy-reporter-plugins-kyverno-fips, portieris-fips,...

GitHub: PATs without the required scope can leak issues

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with a classic personal access token PAT lacking the repo scope to retrieve issues and commits from private and internal repositories via the search REST API endpoints. The user...