GHSA-R6QV-FRPC-Q66C vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-VGPV-F759-9WX3 vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby3.2-rack, logstash, kube-fluentd-operator, ruby3.4-rack, ruby4.0-rack...

GHSA-326M-34V3-GV5P vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-XV6W-GXJ8-V943 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-6R7G-3MM3-FHW7 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, gh, kubewatch, dkron, osv-scanner, apko, victoriametrics-cluster, go, mountpoint-s3-csi-driver, aws-network-policy-agent, aws-privateca-issuer, malcontent, flux-notification-controller, dgraph, newrelic-infra-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: terraform-provider-random, bank-vaults, jitsucom-bulker, kubernetes-replicator, terraform-provider-azuread, crane, prometheus-pushgateway, argo-rollouts, multus-cni, whereabouts, gitness, act, kubernetes-csi-external-health-monitor, kaf, keda,...

GHSA-QH3H-3QGQ-CXV8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: polaris-fips, local-path-provisioner-fips, hubble, aws-load-balancer-controller, kubernetes-dashboard-metrics-scraper-fips, flux-image-reflector-controller-fips, go, commercial-chainloop-backend, kyverno-policy-reporter-plugins-kyverno-fips, supercronic,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: polaris-fips, local-path-provisioner-fips, hubble, aws-load-balancer-controller, kubernetes-dashboard-metrics-scraper-fips, flux-image-reflector-controller-fips, go, commercial-chainloop-backend, kyverno-policy-reporter-plugins-kyverno-fips, supercronic,...

CGA-4FP7-X9G3-2Q7H

Bulletin has no description...

CGA-2V25-GMMQ-G2PV

Bulletin has no description...

GHSA-FVCV-3M26-PCQX

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw 2026-04-12 07:51:50+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjbulrf7362m 2026-04-12 23:10:48+00:00| seen|...

GHSA-PHFX-PWWG-945V

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...

CVE-2026-56074

creationtimestamp| type| source ---|---|--- 2026-04-10 19:28:38+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-ffp3-3562-8cv3...

CVE-2026-40148

creationtimestamp| type| source ---|---|--- 2026-04-10 19:26:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f2h6-7xfr-xm8w...

Arbitrary Code Injection

Overview praisonaiagents is a Praison AI agents for completing complex tasks with Self Reflection Agents Affected versions of this package are vulnerable to Arbitrary Code Injection in the executecodedirect function when the AST-based filtering mechanism fails to block dangerous attribute access...

CVE-2026-40115

creationtimestamp| type| source ---|---|--- 2026-04-10 19:23:13+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-2xgv-5cv2-47vv...

GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware

ReversingLabs has discovered a fresh wave of the graphalgo campaign in which North Korean Lazarus hackers are using fake Florida LLCs, mimicking SWFT Blockchain, and using GitHub typo-squatting to target developers with malware...

CVE-2026-35599

creationtimestamp| type| source ---|---|--- 2026-04-10 15:34:41+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-r4fg-73rc-hhh7...