124 matches found
CLEANSTART-2026-XF15574 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Security vulnerability affects the octo-sts package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: jobset, crossplane-provider-aws-chime, crossplane-provider-aws-ivs-fips, newrelic-fluent-bit-output, amazon-eks-ami-fips, kube-logging-logging-operator, terraform-provider-kubernetes-fips, rancher-system-agent, dive, crossplane-provider-aws-sagemaker,...
GO-2025-3779 vulnerabilities
Vulnerabilities for packages: octo-sts...
GO-2025-3779 vulnerabilities
Vulnerabilities for packages: octo-sts...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: rabbitmq-cluster-operator, cri-tools, crossplane-provider-azure-storage, terraform-provider-acme, crossplane, k9s, falco-no-driver, frp, argo-rollouts, crossplane-provider-aws-elasticache, hubble-ui, kubernetes-csi-node-driver-registrar, glab, kubescape-operator, kum...
Malicious code in animated-octo-spoon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c54ed87d7e17e6be9f6e7c22f4f008e7a6326253127248f2c14f8a19390ac31 animated-octo-spoon 0.1.0 ships a 2.6MB Linux ELF binary named 'forge' a Rust-compiled CUDA GPU miner plus a launcher script start.sh. The package's...
MAL-2026-10985 Malicious code in animated-octo-spoon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c54ed87d7e17e6be9f6e7c22f4f008e7a6326253127248f2c14f8a19390ac31 animated-octo-spoon 0.1.0 ships a 2.6MB Linux ELF binary named 'forge' a Rust-compiled CUDA GPU miner plus a launcher script start.sh. The package's...
MAL-2026-10918 Malicious code in automatic-octo-invention (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dfb4e3eedab24e355b6d24db6096e6752563e220d28e83ad2cf213fe49fd89 The package ships an 8.6 MB stripped ELF binary at automaticoctoinvention/claw sha256 f6fe45f8fe9081987505af31f0249021a65b558af514f2e4e37340fb3182805...
linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16216 via django-jet (1.0.8)
django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16216 Source advisory: SNYK:PYTHON-DJANGOJET-18017927...
linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16215 via django-jet (1.0.8)
django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16215 Source advisory: SNYK:PYTHON-DJANGOJET-18017926...
CVE-2026-39882 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, aws-otel-collector-fips, harbor-registry-fips, cortex, fluent-bit-plugin-loki, external-dns, gitaly, bento-fips, dapr-fips, google-cloud-otel-ops-collector, kserve, traefik, aactl, k6-fips, gotrue, op-geth, teleport-operator-fips,...
GHSA-W8RR-5GCM-PP58 vulnerabilities
Vulnerabilities for packages: docker-cli-buildx-fips, aws-otel-collector-fips, harbor-registry-fips, cortex, fluent-bit-plugin-loki, external-dns, gitaly, bento-fips, dapr-fips, google-cloud-otel-ops-collector, kserve, traefik, aactl, k6-fips, gotrue, op-geth, teleport-operator-fips,...
Malicious code in @lbnqduy180500/cautious-octo-sniffle (npm)
The package @lbnqduy180500/cautious-octo-sniffle was found to contain malicious code...
Malicious code in @lbnqduy180500/fuzzy-octo-meme (npm)
The package @lbnqduy180500/fuzzy-octo-meme was found to contain malicious code...
Malicious code in @lbnqduy180500/jubilant-octo-couscous (npm)
The package @lbnqduy180500/jubilant-octo-couscous was found to contain malicious code...
Malicious code in @lbnqduy180500/musical-octo-funicular (npm)
The package @lbnqduy180500/musical-octo-funicular was found to contain malicious code...
Malicious code in @lbnqduy180500/upgraded-octo-palm-tree (npm)
The package @lbnqduy180500/upgraded-octo-palm-tree was found to contain malicious code...
Malicious code in @lbnqduy180500/vigilant-octo-spoon (npm)
The package @lbnqduy180500/vigilant-octo-spoon was found to contain malicious code...