178 matches found
CVE-2026-50103 Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...
CVE-2026-50103
CVE-2026-50103 affects the GOOSE/R-GOOSE parser in libIEC61850 (MZ Automation) and describes a NULL dereference when parsing malformed TLV values, enabling a network-adjacent DoS by crashing the subscriber. The related PoCs and analysis in the connected documents confirm the issue and indicate fi...
EUVD-2026-48396
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...
PT-2026-64177
Name of the Vulnerable Software and Affected Versions MZ Automation libIEC61850 affected versions not specified Description A NULL pointer dereference occurs in the L2 GOOSE and R-GOOSE shared parser. This issue allows a network-adjacent attacker to crash a subscribing application by sending a...
[SECURITY] Fedora 43 Update: goose-1.36.0-1.fc43
Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...
Fedora 44 : goose (2026-00021c7c91)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-00021c7c91 advisory. Update goose to 1.36.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 43 : goose (2026-08bb036c3e)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-08bb036c3e advisory. Update goose to 1.36.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Malicious code in sf-silly-goose-requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...
CVE-2026-41889 vulnerabilities
Vulnerabilities for packages: cloudnative-pg, sqlexporter-fips, ory-kratos, splunk-otel-collector-fips, openbao-fips, chainloop-control-plane-fips, kots, falcosidekick, kine, opentelemetry-collector-contrib, cloudnative-pg-fips, authentik-fips, kube-bench, gitaly-fips, grafana-alloy, openfga-fips...
Fedora 44 : goose (2026-6ff3ef2d32)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6ff3ef2d32 advisory. Update goose to fix fedora2449678 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
[SECURITY] Fedora 43 Update: goose-1.23.2-7.fc43
Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...
Fedora: Security Advisory (FEDORA-2026-a45f438402)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 43 : goose (2026-a45f438402)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a45f438402 advisory. Update goose to fix fedora2449678 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
GHSA-8FJ7-8H3W-XWFM vulnerabilities
Vulnerabilities for packages: flux-fips, apko-fips, splunk-otel-collector-fips, opentelemetry-collector-contrib, melange, buildkite-agent-fips, cloud-sql-proxy-fips, apache-beam-java-sdk, trivy, crossplane-provider-aws-efs-fips, grafana-alloy, crossplane-provider-aws-acm-fips, flux-operator,...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: flux-fips, apko-fips, splunk-otel-collector-fips, opentelemetry-collector-contrib, melange, buildkite-agent-fips, cloud-sql-proxy-fips, apache-beam-java-sdk, trivy, crossplane-provider-aws-efs-fips, grafana-alloy, crossplane-provider-aws-acm-fips, flux-operator,...
Malicious code in classical-blush-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120026
Malicious code in classical-blush-goose npm...
EUVD-2025-117055
Malicious code in strategic-red-goose npm...