GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, kube-rbac-proxy, metrics-server, mongodb-kubernetes-operator, argo-rollouts, kwok, kubelet-csr-approver, skopeo, pvc-autoresizer, vault-env, velero-plugin-for-microsoft-azure, opentofu, whereabouts, vt-cli, cert-manager-cmctl,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, git-credential-oauth, wavefront-collector-for-kubernetes, openbao-k8s-fips, configmap-reload, spicedb-operator-fips, wgcf, nvidia-nsight-compute-12.8, crossplane-function-go-templating-fips, mkcert, xeol-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, git-credential-oauth, wavefront-collector-for-kubernetes, openbao-k8s-fips, configmap-reload, spicedb-operator-fips, wgcf, nvidia-nsight-compute-12.8, crossplane-function-go-templating-fips, mkcert, xeol-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, git-credential-oauth, wavefront-collector-for-kubernetes, openbao-k8s-fips, configmap-reload, spicedb-operator-fips, wgcf, nvidia-nsight-compute-12.8, crossplane-function-go-templating-fips, xeol-fips, nvidia-nsight-compute-13.1,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, git-credential-oauth, wavefront-collector-for-kubernetes, openbao-k8s-fips, configmap-reload, spicedb-operator-fips, wgcf, nvidia-nsight-compute-12.8, crossplane-function-go-templating-fips, mkcert, xeol-fips,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, git-credential-oauth, wavefront-collector-for-kubernetes, openbao-k8s-fips, configmap-reload, spicedb-operator-fips, wgcf, nvidia-nsight-compute-12.8, crossplane-function-go-templating-fips, mkcert, xeol-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, git-credential-oauth, wavefront-collector-for-kubernetes, openbao-k8s-fips, configmap-reload, spicedb-operator-fips, wgcf, nvidia-nsight-compute-12.8, crossplane-function-go-templating-fips, mkcert, xeol-fips,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: scorecard, harbor-registry-fips, git-credential-oauth, wavefront-collector-for-kubernetes, openbao-k8s-fips, configmap-reload, spicedb-operator-fips, wgcf, nvidia-nsight-compute-12.8, crossplane-function-go-templating-fips, xeol-fips, nvidia-nsight-compute-13.1,...

EUVD-1999-1423

Malware in sbrugna...

Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5786 Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5538 Malicious code in k6-studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b163d493761fa12ed8094157415651ec1b22824f021a7483637346825e08cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1041 Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

Malicious code in k6-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9283bea57aa9a22d9519e64d8cc610d3f2bb793709fadccbf94036a797d9ca58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1137 Malicious code in k6-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9283bea57aa9a22d9519e64d8cc610d3f2bb793709fadccbf94036a797d9ca58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in k6-learn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16bc5803188467cda4dd1fe959c79f45cecd30451f206ab0dd7d318ebcf62ac3 Any computer that has this package installed or running should be considered...

MAL-2025-708 Malicious code in k6-learn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16bc5803188467cda4dd1fe959c79f45cecd30451f206ab0dd7d318ebcf62ac3 Any computer that has this package installed or running should be considered...