CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, rancher-machine, fq, secrets-store-csi-driver-provider-gcp, go-md2man, crossplane, maru, src-fingerprint, pulumi-kubernetes-operator, shfmt, infinispan-operator, iptables-wrappers, renovate, velero-plugin-for-csi, amass, go-bindata,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, rancher-machine, fq, secrets-store-csi-driver-provider-gcp, go-md2man, crossplane, maru, src-fingerprint, pulumi-kubernetes-operator, shfmt, infinispan-operator, iptables-wrappers, renovate, velero-plugin-for-csi, amass, go-bindata,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, rancher-machine, fq, secrets-store-csi-driver-provider-gcp, go-md2man, crossplane, maru, src-fingerprint, pulumi-kubernetes-operator, shfmt, infinispan-operator, iptables-wrappers, renovate, velero-plugin-for-csi, amass, go-bindata,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: sealed-secrets, prometheus-node-exporter, step-kms-plugin, influxd, prometheus, longhorn-instance-manager, php-fpmexporter, dask-gateway, tekton-pipelines-fips, aws-s3-controller, trivy-operator-fips, gatekeeper, hello-world-golang, protoc-gen-go, opentofu, istio,...

EUVD-1999-1423

Malware in sbrugna...

Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5786 Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5538 Malicious code in k6-studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b163d493761fa12ed8094157415651ec1b22824f021a7483637346825e08cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1041 Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

Malicious code in k6-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9283bea57aa9a22d9519e64d8cc610d3f2bb793709fadccbf94036a797d9ca58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1137 Malicious code in k6-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9283bea57aa9a22d9519e64d8cc610d3f2bb793709fadccbf94036a797d9ca58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in k6-learn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16bc5803188467cda4dd1fe959c79f45cecd30451f206ab0dd7d318ebcf62ac3 Any computer that has this package installed or running should be considered...

MAL-2025-708 Malicious code in k6-learn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16bc5803188467cda4dd1fe959c79f45cecd30451f206ab0dd7d318ebcf62ac3 Any computer that has this package installed or running should be considered...