GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: rancher-machine, kube-bench, pulumi-kubernetes-operator, mongo-tools, cluster-api-gcp-controller, sbom-convert, tofu-controller, spire-controller-manager, terraform-provider-azapi, timescaledb-tune, guac, wire-go, chartmuseum, contour, go-licenses, pvc-autoresizer,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: rancher-machine, kube-bench, pulumi-kubernetes-operator, mongo-tools, cluster-api-gcp-controller, sbom-convert, tofu-controller, spire-controller-manager, terraform-provider-azapi, timescaledb-tune, guac, wire-go, chartmuseum, contour, go-licenses, pvc-autoresizer,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, vertical-pod-autoscaler, mattmoor-chainit, dataplaneapi-fips, yace-fips, secrets-store-csi-driver-provider-gcp,...

CVE-2025-58183 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, vertical-pod-autoscaler, mattmoor-chainit, dataplaneapi-fips, yace-fips, mongodb-kubernetes-operator, pushprox, kubebuilder, nova-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, vertical-pod-autoscaler, mattmoor-chainit, dataplaneapi-fips, yace-fips, secrets-store-csi-driver-provider-gcp,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, vertical-pod-autoscaler, mattmoor-chainit, dataplaneapi-fips, yace-fips, secrets-store-csi-driver-provider-gcp,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, vertical-pod-autoscaler, mattmoor-chainit, dataplaneapi-fips, yace-fips, mongodb-kubernetes-operator, pushprox, kubebuilder, nova-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, vertical-pod-autoscaler, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, yace-fips, mattmoor-chainit, dataplaneapi-fips, secrets-store-csi-driver-provider-gcp, mongodb-kubernetes-operator, pushprox,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, helm-mapkubeapis, vertical-pod-autoscaler, conftest-fips, nvidia-nsight-compute-13.0, azure-ipam, yace-fips, mattmoor-chainit, dataplaneapi-fips, secrets-store-csi-driver-provider-gcp, mongodb-kubernetes-operator, pushprox,...

Astra Linux – Vulnerability in curl

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3, or SMTP scheme, curl may incorrectly pass the bearer token to the new target host...

CVE-2025-12466

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

GO-2025-4075 Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server

Mattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization in github.com/mattermost/mattermost-server...

GHSA-JQMQ-FPWV-P925 Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466 Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

CVE-2025-12466

The issue CVE-2025-12466 affects Drupal Simple OAuth (OAuth2) & OpenID Connect module, specifically versions 6.0.0 through 6.0.6 (before 6.0.7). Root cause is an authentication bypass via an alternate path or channel, enabling bypass of login/authentication. Impact is authenticated bypass risk as...

CVE-2025-12466 Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth OAuth2 & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth OAuth2 & OpenID Connect: from 6.0.0 before 6.0.7...

Malicious Package

Overview etherdjs is a malicious package. This is a "typosquatting" package, which means the package name is based on existing repositories, namespaces, or components, it aims to trick users to download the package which contains a malicious code. Payload behavior The malicious payload runs npm's...

Malicious Package

Overview dezcord.js is a malicious package. This is a "typosquatting" package, which means the package name is based on existing repositories, namespaces, or components, it aims to trick users to download the package which contains a malicious code. Payload behavior The malicious payload runs npm...