173 matches found
GO-2026-5778 vulnerabilities
Vulnerabilities for packages: ratify, slsa-verifier, tflint, teleport, ko, kubescape, spire-server, kyverno, crossplane, gitsign, tkn, neuvector-sigstore-interface, falcoctl, aactl, zarf, kyverno-notation-aws, policy-controller, tekton-chains, goreleaser, trivy-operator...
GO-2025-4192 vulnerabilities
Vulnerabilities for packages: ratify, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, zot, tkn, witness, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, docker-cli-buildx, aactl, flux-source-controller, zarf,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: ratify, slsa-verifier, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, buildkitd, tkn, zot, witness, trivy, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, docker-cli-buildx, aactl,...
GO-2026-4610 vulnerabilities
Vulnerabilities for packages: flux-helm-controller, harbor, tekton-pipelines, paranoia, harbor-scanner-trivy, slsa-verifier, gh, k9s, guac, trufflehog, argo-workflows, vcluster, kubescape-operator, k3s, teleport, vault-secrets-webhook, ko, spire-server, kyverno, crossplane, gitsign, vendir,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: ratify, slsa-verifier, tflint, gh, teleport, sigstore-scaffolding, ko, kubescape, spire-server, kyverno, crossplane, gitsign, buildkitd, tkn, zot, witness, trivy, vexctl, neuvector-sigstore-interface, cosign, skaffold, falcoctl, aactl, rekor, flux-source-controller,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, nri-f5, kind, emissary, nri-apache, spire-controller-manager, kubernetes-dashboard, aws-otel-collector, oauth2-proxy, migrate, kubernetes-csi-driver-hostpath, kubernetes-dashboard-api, aws-application-networking-k8s, eksctl,...
MAL-2026-11883 Malicious code in @servicetitan/ko-bridge (npm)
npm/@servicetitan/ko-bridge is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
PT-2026-40630
Name of the Vulnerable Software and Affected Versions NXP moal.ko versions prior to 5.1.7.10 Description A stack buffer overflow exists in the wireless kernel module. The issue occurs within the woal init module param function via the mod para parameter. Recommendations Update to version 5.1.7.10...
Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M
A coordinated international operation involving U.S. and Chinese authorities has arrested at least 276 suspects and shut down nine scam centers used for cryptocurrency investment fraud schemes targeting Americans, resulting in millions of dollars in losses. The crackdown was led by the Dubai...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: kots, wave, cloud-provider-azure, harbor, mailpit, ip-masq-agent, neuvector-scanner, rancher-helm, dfc, pulumi, nri-mongodb, otel-cli, mattermost, gitsign, kubernetes-dashboard, pguser, xeol, node-problem-detector, nri-postgresql, juicefs-csi-driver, spegel,...
CVE-2026-32288 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, ko-fips, tekton-pipelines-fips, scorecard, splunk-otel-collector, external-secrets-operator-fips, chartmuseum, nuclei, syncthing-fips, cephcsi, localstack, knative-operator-fips, aws-flb-kinesis-fips, gh, prometheus-fips, docker-cli,...
GHSA-X4JJ-H2V8-HQQV vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, ko-fips, tekton-pipelines-fips, scorecard, splunk-otel-collector, external-secrets-operator-fips, chartmuseum, nuclei, syncthing-fips, cephcsi, localstack, knative-operator-fips, aws-flb-kinesis-fips, gh, prometheus-fips, docker-cli,...
CVE-2026-32283 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, crossplane-provider-azure-storage, ingress-nginx-controller-fips, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, ucd, kyverno-policy-reporter-ui, apache-exporter,...
GHSA-GJVH-7JH8-7XHM vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, crossplane-provider-azure-storage, ingress-nginx-controller-fips, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, ucd, kyverno-policy-reporter-ui, apache-exporter,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: terraform-provider-random, crossplane-aws-provider, ghaudit, fq, cert-manager-istio-csr-fips, splunk-otel-collector, prometheus-nats-exporter, mongo-tools, external-secrets-operator-fips, secrets-store-csi-driver, falco-exporter, localstack, newrelic-infra-operator,...
CVE-2026-1612
AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...
CVE-2026-1612
AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...
PT-2026-29008
AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...
Malicious code in budi-ko-rusmaya (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061573f2a4790f9bbd5422f4a717684a629bdb3a8bc624eb80e49105181295bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
