GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby3.4-rails, logstash, ruby3.2-fluentd-kubernetes-daemonset,...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.3-faraday, gitlab-cng, gitlab-rails-ce-fips, cinc-auditor, gitlab-rails-ce, kube-logging-operator, logstash, logstash-fips...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.3-faraday, gitlab-cng, gitlab-rails-ce-fips, cinc-auditor, gitlab-rails-ce, kube-logging-operator, logstash, logstash-fips...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: wazuh-manager, authentik-fips, openstack-placement-2025.2-fips, superset-fips, lmcache-cuda-12.8, openstack-tempest-2025.1, openstack-tempest-2026.1, nvidia-nsight-compute-13.3, dask-kubernetes, openstack-horizon-2025.2-fips, openstack-keystone-2025.2-fips,...

GHSA-WJ3P-5H3X-C74Q vulnerabilities

Vulnerabilities for packages: backup-restore-operator-fips, backup-restore-operator...

CVE-2025-62879 vulnerabilities

Vulnerabilities for packages: backup-restore-operator-fips, backup-restore-operator...

CVE-2026-47262 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, metallb, rke2-runtime-fips, crossplane-provider-aws-memorydb-fips, boring-registry, knative-operator-fips, cloudbeat, crossplane-provider-aws-kafkaconnect, gcp-compute-persistent-disk-csi-driver-fips, commercial-expanso-edge, distributio...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, metallb, rke2-runtime-fips, crossplane-provider-aws-memorydb-fips, boring-registry, knative-operator-fips, cloudbeat, crossplane-provider-aws-kafkaconnect, gcp-compute-persistent-disk-csi-driver-fips, commercial-expanso-edge, distributio...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: grype, helm-push, k3s, kubescape-operator, cloudbeat, docker-fips, kubevela, chainctl-fips, consul-k8s-fips, grype-fips, k8sgpt, jfrog-cli, chartmuseum-fips, tigera-operator, chaos-mesh-fips, trivy-operator-fips, grype-db, gitlab-rails-ce-fips, k9s-fips, syft, zarf,...

Malicious code in node-core-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33f74e3f73fd5580ecf994b7db0349ee540754d65d4467b8b04b8c79e3d257b scripts/postinstall.js runs automatically on npm install Windows only and behaves as a classic install-time dropper. It XOR-decodes key 0x5A a...