Jfrog Artifactory <6.17.0 - Default Admin Password

Jfrog Artifactory prior to 6.17.0 uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. id: CVE-2019-17444 info: name: Jfrog Artifactory...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

Malicious Package

Overview solana-web3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious Package

Overview solana-web3-py is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview solana-web3-stable is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @solana-labs/web3.js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview solana-mev-bot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview solana-js-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

jfrog-cli-2.104.1-1.1 on GA media (moderate)

jfrog-cli-2.104.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10844-1 Rating: moderate Cross-References: CVE-2025-11579 CVSS scores: CVE-2025-11579 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-11579 SUSE : 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA...

OPENSUSE-SU-2026:10844-1 jfrog-cli-2.104.1-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.104.1-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in zest-product (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9081ad708b658c1bd56299e401ca6a764cc9137d99573bc922d38a7381cc30d On npm install, postinstall.js collects host identity and environment data os.hostname, username, process.cwd, process.env values, plus shelled-out...

Malicious Package

Overview @kindo/selfbot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, terragrunt-fips, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips,...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: trivy, nfpm, cerbos, grype, terragrunt-fips, crossplane-fips, tfsec, k9s, grype-fips, skaffold-fips, osv-scanner, snyk-cli, scorecard, kots, trivy-fips, chainloop-cli-fips, kubevela-fips, kyverno-fips, pulumi-kubernetes-operator, kaniko-fips, grafana-alloy-fips,...

[SECURITY] Fedora 44 Update: jfrog-cli-2.98.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 44 : jfrog-cli (2026-6b87863841)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b87863841 advisory. Upstream release 2.98.0. https://github.com/jfrog/jfrog-cli/releases/tag/v2.98.0 Resolves the following security issues: CVE-2025-11579 CVE-2025-665...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: flux-fips, cluster-api-helm-controller-fips, cert-manager-cmctl-fips, trivy, cerbos, cloudbeat-fips, envoy-gateway, harbor, helm-docs, chaos-mesh, istio, tigera-operator, jfrog-cli, cluster-api-helm-controller, helm-operator-fips, helm-diff-fips, consul-k8s,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: opentofu-fips, gatekeeper-fips, licenseclassifier, newrelic-infrastructure-agent, crossplane-fips, kubernetes, sonobuoy-fips, flux-helm-controller-fips, cilium-fips, flux-operator-fips, aws-flb-firehose, scorecard, bento, telegraf, coredns, docker-compose-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: opentofu-fips, gatekeeper-fips, licenseclassifier, newrelic-infrastructure-agent, crossplane-fips, kubernetes, sonobuoy-fips, flux-helm-controller-fips, cilium-fips, flux-operator-fips, aws-flb-firehose, scorecard, bento, telegraf, coredns, docker-compose-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: opentofu-fips, nri-redis, php-fpmexporter, git-sync, rabbitmq-default-user-credential-updater, vertical-pod-autoscaler-fips, gatekeeper-fips, kubelet-csr-approver-fips, newrelic-infrastructure-agent, yace, agentbeat, kubernetes-dashboard-metrics-scraper,...