124 matches found
CLEANSTART-2026-XF15574 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Security vulnerability affects the octo-sts package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: vertical-pod-autoscaler-fips, aws-iam-authenticator-fips, zitadel, longhorn-cli, packer-fips, tfsec, crossplane-provider-aws-lakeformation-fips, prometheus-operator-fips, crossplane-provider-aws-ram-fips, melange, kubernetes-csi-driver-hostpath,...
GO-2025-3779 vulnerabilities
Vulnerabilities for packages: octo-sts...
GO-2025-3779 vulnerabilities
Vulnerabilities for packages: octo-sts...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: karpenter, runc, crossplane-provider-aws-s3, terraform-docs, actions-runner-controller, cert-exporter, litestream, cluster-api-ipam-provider-in-cluster, sftpgo-plugin-eventstore, datadog-agent, aws-flb-kinesis, crossplane-provider-aws-ec2, steampipe,...
Malicious code in animated-octo-spoon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c54ed87d7e17e6be9f6e7c22f4f008e7a6326253127248f2c14f8a19390ac31 animated-octo-spoon 0.1.0 ships a 2.6MB Linux ELF binary named 'forge' a Rust-compiled CUDA GPU miner plus a launcher script start.sh. The package's...
MAL-2026-10985 Malicious code in animated-octo-spoon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c54ed87d7e17e6be9f6e7c22f4f008e7a6326253127248f2c14f8a19390ac31 animated-octo-spoon 0.1.0 ships a 2.6MB Linux ELF binary named 'forge' a Rust-compiled CUDA GPU miner plus a launcher script start.sh. The package's...
MAL-2026-10918 Malicious code in automatic-octo-invention (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dfb4e3eedab24e355b6d24db6096e6752563e220d28e83ad2cf213fe49fd89 The package ships an 8.6 MB stripped ELF binary at automaticoctoinvention/claw sha256 f6fe45f8fe9081987505af31f0249021a65b558af514f2e4e37340fb3182805...
linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16216 via django-jet (1.0.8)
django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16216 Source advisory: SNYK:PYTHON-DJANGOJET-18017927...
linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16215 via django-jet (1.0.8)
django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16215 Source advisory: SNYK:PYTHON-DJANGOJET-18017926...
CVE-2026-39882 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, tkn-fips, kubescape-server-fips, spicedb, opentelemetry-collector, zitadel, external-secrets-operator-fips, thanos-fips, gotenberg, aactl, fleet-server-fips, frankenphp-8.5, kubo-fips, grafana-mimir, opentelemetry-operator, frankenphp-8.4,...
GHSA-W8RR-5GCM-PP58 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, tkn-fips, kubescape-server-fips, spicedb, opentelemetry-collector, zitadel, external-secrets-operator-fips, thanos-fips, gotenberg, aactl, fleet-server-fips, frankenphp-8.5, kubo-fips, grafana-mimir, opentelemetry-operator, frankenphp-8.4,...
Malicious code in @lbnqduy180500/cautious-octo-sniffle (npm)
The package @lbnqduy180500/cautious-octo-sniffle was found to contain malicious code...
Malicious code in @lbnqduy180500/upgraded-octo-palm-tree (npm)
The package @lbnqduy180500/upgraded-octo-palm-tree was found to contain malicious code...
Malicious code in @lbnqduy180500/vigilant-octo-spoon (npm)
The package @lbnqduy180500/vigilant-octo-spoon was found to contain malicious code...
Malicious code in @lbnqduy2180500/scaling-octo-winner (npm)
The package @lbnqduy2180500/scaling-octo-winner was found to contain malicious code...
MAL-2025-42682 Malicious code in @lbnqduy180500/upgraded-octo-palm-tree (npm)
The package @lbnqduy180500/upgraded-octo-palm-tree was found to contain malicious code...
MAL-2025-42671 Malicious code in @lbnqduy180500/fictional-octo-garbanzo (npm)
The package @lbnqduy180500/fictional-octo-garbanzo was found to contain malicious code...