39 matches found
GO-2026-6165 vulnerabilities
Vulnerabilities for packages: rke2-runtime, ipfs-cluster-fips, rke2-runtime-fips, telegraf, k3s, ipfs-cluster, spegel, kubo-fips, spegel-fips, kubo, livekit-egress...
GO-2026-6163 vulnerabilities
Vulnerabilities for packages: op-geth, rke2-runtime, ipfs-cluster-fips, stunnerd, rke2-runtime-fips, k3s, ipfs-cluster, spegel, kubo-fips, spegel-fips, kubo, livekit-egress...
GO-2026-4773 vulnerabilities
Vulnerabilities for packages: ferretdb, flux-operator-fips, opencost-fips, datadog-agent, opencost, gitlab-workhorse-ce, osv-scanner, glab, datadog-agent-fips, livekit-cli, gitlab-workhorse-ce-fips, jaeger-fips, flux-operator, jaeger...
GO-2026-4394 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, hydra-fips, pulumi-kubernetes-operator, backup-restore-operator, cloudbeat-fips, zitadel, kubernetes-csi-external-snapshotter, jaeger-operator, k8sgateway-fips, kuma, op-geth, rke2-runtime-fips, packer, jaeger-operator-fips, bank-vaults-fips,...
MAL-2026-10628 Malicious code in ai-explain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2b6beb476c828df723da0a2b4b524cf671e2eed9223a6e04c45c0ec4d59172 [email protected] ships a postinstall hook dist/postinstall.js, mirrored from scripts/postinstall.js that, on npm install, collects the installer's OS...
Malicious code in ai-explain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a2b6beb476c828df723da0a2b4b524cf671e2eed9223a6e04c45c0ec4d59172 [email protected] ships a postinstall hook dist/postinstall.js, mirrored from scripts/postinstall.js that, on npm install, collects the installer's OS...
Malicious Package
Overview livekit-agents is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
PYSEC-2026-458 Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer
Remote Code Execution via Unsafe Deserialization in Pipecat's LivekitFrameSerializer Summary A critical vulnerability exists in Pipecat's LivekitFrameSerializer – an optional, non-default, undocumented frame serializer class now deprecated intended for LiveKit integration. The class's deserialize...
PT-2026-53537
Remote Code Execution via Unsafe Deserialization in Pipecat's LivekitFrameSerializer Summary A critical vulnerability exists in Pipecat's LivekitFrameSerializer – an optional, non-default, undocumented frame serializer class now deprecated intended for LiveKit integration. The class's deserialize...
MAL-2026-6561 Malicious code in skillspector (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c77584b4e40db9023ca0b8a90fa1bd611c859ed486f99ca3a7c9a83dbfa9877 This package presents itself as a redistribution of NVIDIA/skillspector pyproject Homepage points to github.com/NVIDIA/skillspector and the source...
MAL-2026-6555 Malicious code in livekit-agents (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf921f58c69745fee91e812853b493a282f3d42f55db38516ba54b827ea35b The unscoped npm package livekit-agents advertises itself in README as the official LiveKit Agents SDK and links to livekit.io documentation, but the...
Malicious code in livekit-agents (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf921f58c69745fee91e812853b493a282f3d42f55db38516ba54b827ea35b The unscoped npm package livekit-agents advertises itself in README as the official LiveKit Agents SDK and links to livekit.io documentation, but the...
GHSA-33VJ-92QQ-66HC vulnerabilities
Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, kots, chainctl, buildkitd, helm-push, kubescape, headlamp, consul-k8s, envoy-gateway, trivy-operator, livekit-cli, neuvector-scanner-fip...
CVE-2026-50195 vulnerabilities
Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, kots, chainctl, buildkitd, helm-push, kubescape, headlamp, consul-k8s, envoy-gateway, trivy-operator, livekit-cli, neuvector-scanner-fip...
CVE-2026-53489 vulnerabilities
Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, kots, chainctl, buildkitd, helm-push, kubescape, headlamp, consul-k8s, envoy-gateway, trivy-operator, livekit-cli, neuvector-scanner-fip...
CVE-2026-53492 vulnerabilities
Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, kots, chainctl, buildkitd, helm-push, kubescape, headlamp, consul-k8s, envoy-gateway, trivy-operator, livekit-cli, neuvector-scanner-fip...
CVE-2025-62373
Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0.0.41 through 0.0.93 have a vulnerability in LivekitFrameSerializer – an optional, non-default, undocumented frame serializer class now deprecated intended for LiveKit...
CVE-2026-46680 vulnerabilities
Vulnerabilities for packages: kube-mgmt-fips, chaos-mesh, cloudbeat-fips, grype, k9s-fips, gitlab-rails-ce-fips, tigera-operator-fips, wolfictl, docker-compose, kots, chainctl, buildkitd, gogatekeeper, helm-push, kubescape, headlamp, consul-k8s, envoy-gateway, trivy-operator, livekit-cli,...
GHSA-C2JG-5CP7-6WC7 Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer
Remote Code Execution via Unsafe Deserialization in Pipecat's LivekitFrameSerializer Summary A critical vulnerability exists in Pipecat's LivekitFrameSerializer – an optional, non-default, undocumented frame serializer class now deprecated intended for LiveKit integration. The class's deserialize...
