GO-2024-2491 vulnerabilities

Vulnerabilities for packages: skaffold, trivy, syft, zot, newrelic-infrastructure-agent, cadvisor, zarf, wolfictl, grype, skopeo, kubescape, buildkitd, kubernetes, podman, k9s, kots, docker, k3d, ctop, kaniko, nerdctl, k3s, runc...

GO-2026-5005 vulnerabilities

Vulnerabilities for packages: cilium, traefik, mattermost, kubernetes-fips, docker-cli-buildx, nemo, containerd, kyverno, kuma, mattermost-fips, frankenphp-8.4, harbor-fips, istio, kube-state-metrics, terraform, etcd, kubernetes, kube-arangodb-fips, buildah, prometheus, etcd-fips, k3s,...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: kaniko, k9s, kots, runc, grype, nerdctl, newrelic-infrastructure-agent, podman, k3d, cadvisor, zot, kubernetes, skaffold, ctop, trivy, kubescape, syft, wolfictl, zarf, docker, k3s, skopeo, buildkitd...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: kaniko, kubevela, kots, grype, newrelic-infrastructure-agent, k3d, up, zot, k8sgpt, helm, skaffold, ctop, gitness, eksctl, cilium-cli, kubescape, flux-source-controller, trivy, flux-helm-controller, melange, fuse-overlayfs-snapshotter, helm-push, buildkitd...

GO-2025-4135 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, step, temporal-server, mailpit, terragrunt, cloudflared, spqr, seaweedfs, filebrowser, argo-events, azcopy, crossplane-provider-aws, postgres-operator, crossplane-provider-aws-firehose, q, restic, terraform-provider-azapi, gitsign, mc,...

CVE-2026-18164

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-225-01...

Malicious code in @opezneppelin/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...

Malicious code in date-fmt-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae88f68f30ebd69a595537393ce95c4ce5e543b558572769fa2c608fa1b1b0d The package presents itself as a date-formatting utility, but its index.js is a trivial cover and a source comment explicitly labels the library as a...

New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure

Afghan telecom providers and South Asian critical infrastructure organizations have emerged as the target of a new ongoing campaign that delivers a previously undocumented backdoor called PATCHCORD. According to Acronis Threat Research Unit TRU, the backdoor is a compiled C/C++ implant delivered ...

CVE-2026-4879

creationtimestamp| type| source ---|---|--- 2026-08-13 14:05:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m...

North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT workers flip that model. They apply for jobs, pass interviews, receive legitimate credentials, and can end up inside the same systems companies spend millions trying to protect. That risk is no longer...

RHSA-2026:47126 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.2 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

CVE-2026-67558

creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/66wymlkohacrk...

EUVD-2026-56724

CVET-EOP...

CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability

...

CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-62913

CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...

Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Networks

Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizations across the world. Targets of these attacks include healthcare and public health, financial services, government services and...

CVE-2026-12372

A flaw was found in NLTK. A Server-Side Request Forgery SSRF vulnerability allows an attacker to influence a URL passed to NLTK's network-loading helpers. This occurs because the nltk.pathsec.validatenetworkurl function fails to properly identify and reject IP addresses within the RFC 6598 shared...