termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are using the centralized repository hosted by HashiCorp as a distribution vector for malicious payloads. According to Aikido, the list of...

EUVD-2026-75435

Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySource=docker mode. Attackers can inject shell metacharacters through malicious dependency names to execute arbitrary...

CLEANSTART-2026-BY91066 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the dynatrace-operator package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

openSUSE 16 Security Update : go1.25-openssl (openSUSE-SU-2026:21696-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21696-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: -...

CVE-2019-25766

A flaw was found in Renovate. During certain Go Modules update failure scenarios, temporary repository tokens are inadvertently leaked into pull request comments. A remote attacker able to view these comments could obtain the exposed tokens, leading to unauthorized access to repositories. This...

CVE-2019-25766

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

CVE-2019-25766 Renovate before 19.38.7 Credential Exposure via Go Modules

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

EUVD-2019-20202

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

CVE-2019-25766 Renovate before 19.38.7 Credential Exposure via Go Modules

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

PT-2026-78370

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, crossplane-provider-aws-dlm-fips, opa-fips, grafana-agent-operator, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-firehose, crossplane-provider-aws-licensemanager, cluster-api-gcp-controller-fips,...

GO-2024-2937 vulnerabilities

Vulnerabilities for packages: chainctl, hugo, hugo-extended, ollama, gotenberg...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-aws-elasticache, crossplane-provider-aws-rds, kubevela, vexctl, gomplate, flux-image-automation-controller, crossplane-provider-aws-firehose, goreleaser, crossplane, crossplane-provider-aws-cloudformation, flux,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, nri-f5, go, howdy-yall, pvc-autoresizer, buf, cloud-provider-aws, karpenter, grafana-operator, newrelic-nri-statsd, spire-server, verticadb-operator, docker-cli, gofumpt, falco-no-driver, hey, nri-mssql, container-object-storage-interface,...

GO-2026-4526 vulnerabilities

Vulnerabilities for packages: aws-otel-collector, crossplane-provider-aws-cloudfront, crossplane-provider-aws-s3, nuclei, crossplane-provider-aws-kinesis, crossplane-provider-aws-firehose, crossplane-provider-aws-dynamodb, crossplane-provider-aws-cloudformation, crossplane-provider-keycloak,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: mkcert, yq, petname, rekor, grpcurl, step-issuer, helm-operator, wazero, skopeo, zarf, nri-cassandra, dockerize, tflint, ytt, wait-for-port, crane, controller-gen, certificate-transparency, litefs, doppler-kubernetes-operator, gomplate, golangci-lint, nats-server,...

UBUNTU-CVE-2026-56864

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

CVE-2026-56865

A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...

CVE-2026-56864

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...