CVE-2026-32990 vulnerabilities

Vulnerabilities for packages: kayenta-fips, ontop-fips, nacos-docker, ontop, camunda, thingsboard, kayenta, nacos, camunda-zeebe...

CVE-2026-34487 vulnerabilities

Vulnerabilities for packages: kayenta-fips, ontop-fips, nacos-docker, ontop, camunda, thingsboard, kayenta, nacos, camunda-zeebe...

GHSA-69CC-CV78-QC8G vulnerabilities

Vulnerabilities for packages: kayenta-fips, ontop-fips, nacos-docker, ontop, camunda, thingsboard, kayenta, nacos, camunda-zeebe...

GHSA-X4M4-345F-5H5G vulnerabilities

Vulnerabilities for packages: kayenta-fips, ontop-fips, nacos-docker, ontop, camunda, thingsboard, kayenta, nacos, camunda-zeebe...

CVE-2026-29145 vulnerabilities

Vulnerabilities for packages: kayenta-fips, ontop-fips, nacos-docker, ontop, camunda, thingsboard, kayenta, nacos, camunda-zeebe...

CVE-2026-24734 vulnerabilities

Vulnerabilities for packages: kayenta-fips, ontop-fips, nacos-docker, ontop, kayenta, nacos...

GHSA-MGP5-RV84-W37Q vulnerabilities

Vulnerabilities for packages: kayenta-fips, ontop-fips, nacos-docker, ontop, kayenta, nacos...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: kayenta-fips, cassandra-reaper, management-api-for-apache-cassandra-4.1, nacos-docker, thingsboard, kayenta, zookeeper-fips, cassandra, zookeeper, management-api-for-apache-cassandra-4.0, cassandra-fips, sonar-scanner-cli, localstack, kserve-modelmesh, apache-nifi,...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: kayenta-fips, cassandra-reaper, management-api-for-apache-cassandra-4.1, nacos-docker, thingsboard, kayenta, zookeeper-fips, cassandra, zookeeper, management-api-for-apache-cassandra-4.0, cassandra-fips, sonar-scanner-cli, localstack, kserve-modelmesh, apache-nifi,...

EUVD-2021-1841

Malware in sbrugna...

EUVD-2022-6208

Malicious code in bioql PyPI...

EUVD-2022-1307

Malicious code in bioql PyPI...

EUVD-2023-2356

Malicious code in bioql PyPI...

CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

CVE-2021-29441

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor...

CVE-2020-19676

Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in...

Exploit for Missing Authentication for Critical Function in Alibaba Nacos

Introduction The Nacos Derby command execution vulnerability...

VulnCheck KEV: CVE-2021-29441

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor...

VulnCheck KEV: CVE-2021-29442

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly...

GHSA-V6C8-PWHQ-288M Nacos Spring vulnerable to Unsafe Deserialization

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...