Lucene search
+L

76 matches found

Snyk
Snyk
•added 2026/09/18 3:30 a.m.•19 views

Malicious Package

Overview linode-developers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in linode-developers (npm)

Source: amazon-inspector 55911ad2b0d383d30b5cd3daeec59c9f4419c01231c45fe9813e1b7ff7260e13 The package linode-developers was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•83 views

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: omnibump, rancher-agent, vault-k8s, aws-flb-cloudwatch, spark-operator, helm, kubeflow, goreleaser, crossplane-provider-azure-authorization, knative-serving, go, gomplate, cluster-api-helm-controller, crossplane-provider-aws-firehose, crossplane-provider-aws-dynamodb...

5.9AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•49 views

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: chezmoi, loki, nuclei, rancher-agent, helm, crossplane-provider-azure-authorization, gomplate, crossplane-provider-aws-firehose, crossplane-provider-aws-dynamodb, cloud-provider-aws, fulcio, terraform-provider-acme, crossplane-provider-aws-s3, k9s, nfpm, opentofu,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/08/14 8:23 a.m.•49 views

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, vault-k8s, aws-flb-cloudwatch, spark-operator, restic, helm, kubeflow, goreleaser, doppler-kubernetes-operator, spire-controller-manager, crossplane-provider-aws-firehose, crossplane-provider-aws-dynamodb, cloud-provider-aws, openbao-k8s,...

5.9AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2026/06/25 12:00 p.m.•20 views

Linode Interfaces and Default Firewall Now Generally Available

...

5.8AI score
SaveExploits0
osv_mal
osv_mal
•added 2026/04/16 10:03 a.m.•23 views

MAL-2026-2777 Malicious code in linode-developers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55911ad2b0d383d30b5cd3daeec59c9f4419c01231c45fe9813e1b7ff7260e13 The package linode-developers was found to contain malicious code...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/04/16 10:03 a.m.•23 views

Malicious code in linode-developers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55911ad2b0d383d30b5cd3daeec59c9f4419c01231c45fe9813e1b7ff7260e13 The package linode-developers was found to contain malicious code...

5.7AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/03/25 12:26 a.m.•19 views

SUSE CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS7.8AI score0.00522EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/02/27 4:13 a.m.•20 views

CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS8AI score0.00522EPSS
SaveExploits0References1
osv_go
osv_go
•added 2026/02/27 2:17 a.m.•26 views

GO-2026-4562 Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure in github.com/linode/terraform-provider-linode

Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure in github.com/linode/terraform-provider-linode...

7.7CVSS8AI score0.00522EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/02/26 8:00 p.m.•33 views

Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure

Impact The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, object storage data, and NodeBalancer TLS keys in debug logs without redaction. Important: Provider debug logging is not enabled by default. This issue is...

7.7CVSS7.8AI score0.00522EPSS
SaveExploits0References7Affected Software3
osv_ghsa
osv_ghsa
•added 2026/02/26 8:00 p.m.•30 views

GHSA-5RC7-2JJ6-MP64 Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure

Impact The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, object storage data, and NodeBalancer TLS keys in debug logs without redaction. Important: Provider debug logging is not enabled by default. This issue is...

5CVSS7.8AI score0.00522EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/02/26 8:00 p.m.•24 views

EUVD-2026-8798

Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure...

5CVSS8AI score0.00522EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/02/26 3:13 a.m.•8 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS7.8AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/26 3:13 a.m.•12 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS7.8AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/26 3:13 a.m.•12 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS7.8AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/26 3:13 a.m.•10 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...

7.7CVSS7.8AI score0.00522EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/26 2:16 a.m.•24 views

CVE-2026-27900

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

7.7CVSS0.00522EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/02/26 12:53 a.m.•11 views

CVE-2026-27900 Terraform Provider Debug Logs Vulnerable to Sensitive Information Exposure

The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...

5CVSS7.8AI score0.00522EPSS
SaveExploits0References4
Rows per page
Query Builder