500 matches found
GHSA-9G5Q-2W5X-HMXF vulnerabilities
Vulnerabilities for packages: karma-fips, fluxcd-kustomize-mutating-webhook, fluxcd-kustomize-mutating-webhook-fips, commercial-kyverno, kyverno, telegraf, cosmo-router-fips, zitadel, karma, cosmo-router...
Malicious Package
Overview hercules-readable-xenon-karma is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)
org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...
avalan (1.1.6), karma-medeval (>=0.1.0, <=0.2.0) +11 more potentially affected by CVE-2026-4372 via transformers (4.53.0)
transformers PYPI version 4.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan 1.1.6 - karma-medeval =0.1.0, =0.3.1, =0.0.1.2, =0.2.0, =0.9.0, =0.2.0, =0.2.2, =0.0.3, =0.0.4 - unimeth 0.0.2 -...
CVE-2026-44903 vulnerabilities
Vulnerabilities for packages: jaeger, loki, mc, certificate-transparency, amazon-cloudwatch-agent-operator, opentelemetry-collector, opentelemetry-operator, datadog-agent, cloud-sql-proxy, node-problem-detector, keda, tempo, prometheus-pushgateway, aws-otel-collector, telegraf, karma,...
cubx-http-server (0.4.2), karma-extjs-jasmine-tester (>=1.0.0, <=1.1.3) +5 more potentially affected by unknown CVE via ecstatic (>=3.1.1, <=3.3.0)
ecstatic NPM version =3.1.1, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: MEND:WS-2019-0066...
CVE-2026-40179 vulnerabilities
Vulnerabilities for packages: jaeger, loki, mc, certificate-transparency, datadog-agent, cloud-sql-proxy, keda, tempo, prometheus-pushgateway, aws-otel-collector, telegraf, karma, minio-object-browser, mcp-grafana, istio, minio, trillian, minio-operator, grafana-pyroscope, splunk-otel-collector...
GHSA-VFFH-X6R8-XX99 vulnerabilities
Vulnerabilities for packages: jaeger, loki, mc, certificate-transparency, datadog-agent, cloud-sql-proxy, keda, tempo, prometheus-pushgateway, aws-otel-collector, telegraf, karma, minio-object-browser, mcp-grafana, istio, minio, trillian, minio-operator, grafana-pyroscope, splunk-otel-collector...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, dataplaneapi-fips, eks-node-monitoring-agent, dgraph, gh, local-path-provisioner, k8s-metacollector-fips, mariadb-operator-fips, grafana-operator-fips, external-secrets-operator, kyverno-policy-reporter-plugins-kyverno-fips,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, dataplaneapi-fips, eks-node-monitoring-agent, dgraph, gh, local-path-provisioner, k8s-metacollector-fips, mariadb-operator-fips, grafana-operator-fips, external-secrets-operator, kyverno-policy-reporter-plugins-kyverno-fips,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: istio, dask-gateway, aws-otel-collector-fips, teleport-operator-fips, argo-cd, http-echo, minio-operator, logstash-exporter-fips, kubevirt-cdi-uploadproxy-fips, x509-certificate-exporter, kyverno-policy-reporter-kyverno-plugin-fips, gomplate-fips, k6-operator,...
CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0
Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-27068
Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
UBUNTU-CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
EUVD-2026-5199
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...
CVE-2026-25236
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...