MAL-2026-14040 Malicious code in @workoscalifant/sudoku-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a676b7bd005c67960fae27b9371d1c321998f5d7f6f0d9fc5f2b7d27fb22ce package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath, which execFileSyncs prebuilt/linux-x64/sudoku-hint wi...

GO-2024-3042 vulnerabilities

Vulnerabilities for packages: podman...

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-1897 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3833 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GO-2023-2185 vulnerabilities

Vulnerabilities for packages: go...

GO-2026-5021 vulnerabilities

Vulnerabilities for packages: mattermost, gitlab-workhorse-ce, traefik, vitess, argo-cd, upwind-agent, omnictl-multiarch, telegraf, commercial-grafana, knative-kafka-broker, kyverno-fips, traefik-fips, gitlab-workhorse-ce-fips, keda-fips, kubernetes, kyverno, containerd, argocd-image-updater,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, trivy-operator-fips, nats-top-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9, kubernetes-dashboard-web, kubelet-csr-approver,...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2026-5757 vulnerabilities

Vulnerabilities for packages: minio...

GO-2025-4043 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

GO-2023-1897 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-4740 vulnerabilities

Vulnerabilities for packages: flyte...

GO-2025-3845 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-4181 vulnerabilities

Vulnerabilities for packages: caddy...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, prometheus, mesosphere-vsphere-csi, aws-node-termination-handler, kubernetes-csi-node-driver-registrar, opencost, splunk-otel-collector, certificate-transparency, witness, terraform-provider-sendgrid, kpt, goreleaser, go-discover, step-issuer,...

CVE-2026-56862 Limit handshake messages we are willing to accept post-handshake in crypto/tls

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

Photon OS 5.0: Pmd PHSA-2023-5.0-91-0037

An update of the pmd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0037. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Go PHSA-2026-5.0-90-0763

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0763. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Go PHSA-2026-5.0-91-0830

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0830. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...