36598 matches found
data-cve-poc-py-v1
data-cve-poc This repository collects all CVE vulnerability...
golang-github-prometheus-prometheus-3.9.1-2.1 on GA media (moderate)
golang-github-prometheus-prometheus-3.9.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10124-1 Rating: moderate Cross-References: CVE-2025-13465 CVSS scores: CVE-2025-13465 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2025-13465 SUSE : 8.8...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: aws-fsx-csi-driver, trillian-fips, consul, kyverno-policy-reporter-plugins-trivy-fips, git-sync-fips, temporal-ui-server-fips, crossplane-provider-azure-sql, pushprox, prometheus-bind-exporter, gitlab-workhorse-ce-fips, pvc-autoresizer-fips, extism, falcosidekick,...
CGA-6W2J-RWCR-2QCP
Bulletin has no description...
GHSA-743W-QRV8-633J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M5G9-928C-Q4JG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-743W-QRV8-633J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6JR7-99PF-8VGF
creationtimestamp| type| source ---|---|--- 2026-01-30 23:20:42+00:00| seen| Telegram/pazjypwJ9q5j0AUml5NqFL8eGc5J3hEHdG482ywyT6Ic5U0...
CVE-2025-62240
creationtimestamp| type| source ---|---|--- 2026-01-30 16:30:50+00:00| seen| https://gist.github.com/alon710/dada607d9cf26924b64f5cc8b7be9433...
CLEANSTART-2026-YS66739 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3
Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3. See references for individual vulnerability details...
CVE-2026-1699
In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pullrequesttarget trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to...
CVE-2026-1699
In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pullrequesttarget trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to...
CVE-2026-1699
In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pullrequesttarget trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to...
CVE-2026-1699
CVE-2026-1699 concerns the Eclipse Theia Website repository. The issue: the GitHub Actions workflow .github/workflows/preview.yml used the pull_request_target trigger while checking out and executing untrusted PR code. This allowed any GitHub user to run arbitrary code in the repository’s CI envi...
GHSA-XFHX-R7WW-5995 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
PT-2026-5388
Name of the Vulnerable Software and Affected Versions Eclipse Theia Website affected versions not specified Description The GitHub Actions workflow located at .github/workflows/preview.yml in the Eclipse Theia Website repository utilized the pull request target trigger, which allowed for the...
canonical/get-workflow-version-action GitHub Actions Secret Access
The vulnerability of the “canonical/get-workflow-version-action” component of the platform for automating GitHub Actions processes is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the...
CVE-2026-1699: Inclusion of Functionality from Untrusted Control Sphere
In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pullrequesttarget trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to...