209 matches found
CVE-2020-36188
Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource How to RCE pom.xml com.fasterxml.jackson.core jackson-databind 2.9.10.7...
PT-2026-89963
Package newrelic-infrastructure-agent version 1.78.1-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
GO-2025-3750 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, kubeflow-katib, go, nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.1...
CLEANSTART-2026-FP26400 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 2.4.4-r0, 2.4.4-r1, 2.9.0-r0
Multiple security vulnerabilities affect the newrelic-prometheus-configurator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: gogatekeeper, helm-mapkubeapis, grafana-mimir, skaffold, temporal, nats-server, newrelic-infrastructure-agent, spicedb, spicedb-operator, actions-runner-controller, redka, harbor, kpt, thanos, helm-push, kubernetes, github-mcp-server, snyk-cli, kor, nri-rabbitmq,...
EUVD-2022-2049
Malicious code in bioql PyPI...
Malicious code in new-relic-browser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b484734422b24dacf15c15aabdc6a98a5b34da6281c42feab2eea60be6bd36f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7976 Malicious code in new-relic-browser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b484734422b24dacf15c15aabdc6a98a5b34da6281c42feab2eea60be6bd36f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in new-relic-browser
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: mage, docker-credential-acr-env, prometheus-stackdriver-exporter, tigera-operator, gitleaks, prometheus-alertmanager, trivy, aws-load-balancer-controller-fips, mockery, step-ca, chartmuseum, croc, kube-oidc-proxy, dask-gateway, paranoia, kpt, nats-server,...
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: gops, k3d, memcached-exporter, velero, nri-prometheus, ytt, kubernetes-dns-node-cache, kubeflow-pipelines, skaffold, nri-discovery-kubernetes, doppler-kubernetes-operator, gomplate, gobuster, kubewatch, smarter-device-manager, hey, timoni, pulumi-kubernetes-operator,...
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: gops, k3d, memcached-exporter, velero, nri-prometheus, ytt, kubernetes-dns-node-cache, kubeflow-pipelines, skaffold, nri-discovery-kubernetes, doppler-kubernetes-operator, gomplate, gobuster, kubewatch, smarter-device-manager, hey, timoni, pulumi-kubernetes-operator,...
This Week in Spring - March 5th, 2024
Hi, Spring fans! Welcome to another exciting roundup of This Week in Spring! I expect many of you are reading this for the first time, especially with Facebook and Instagram being down. People have been exploring all the other lesser-known corners of the web, looking for their daily "doom scroll....
This Week in Spring - February 20th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you this fine 20th of February, 2024? I'm doing alright on this rainy 20th of Feburary here in San Francisco, and I hope you are too! We've got a ton of things to get into this week so let's dive right into it! Have y...
Malicious Package
Overview ddc-new-relic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
MAL-2022-2378 Malicious code in ddc-new-relic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 724b8e2d9bbce93045922539d67f166495a0abac1fe3d410e5cea2ec861e82d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ddc-new-relic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 724b8e2d9bbce93045922539d67f166495a0abac1fe3d410e5cea2ec861e82d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-2RVX-CVFC-MCP2 New Relic .NET Agent contains SQL Injection
New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLANALL ON protecti...
New Relic .NET Agent contains SQL Injection
New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLANALL ON protecti...
