108 matches found
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: tetragon, crossplane-provider-aws-bedrockagent-fips, falcosidekick-fips, go-getter-fips, go-discover-fips, crossplane-provider-aws-connect, crossplane-provider-aws-directconnect-fips, yunikorn-web, apiserver-network-proxy, kong-ingress-controller,...
GO-2025-3779 vulnerabilities
Vulnerabilities for packages: octo-sts...
GO-2025-3779 vulnerabilities
Vulnerabilities for packages: octo-sts...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, amazon-cloudwatch-agent-operator, cortex, neuvector-dbgen, pulumi-kubernetes-operator, stakater-reloader, gostatsd, manifest-tool, steampipe, haproxy-ingress, cluster-api-ipam-provider-in-cluster, runc, speedtest-go, opentofu, witness,...
MAL-2026-10985 Malicious code in animated-octo-spoon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c54ed87d7e17e6be9f6e7c22f4f008e7a6326253127248f2c14f8a19390ac31 animated-octo-spoon 0.1.0 ships a 2.6MB Linux ELF binary named 'forge' a Rust-compiled CUDA GPU miner plus a launcher script start.sh. The package's...
Malicious code in animated-octo-spoon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c54ed87d7e17e6be9f6e7c22f4f008e7a6326253127248f2c14f8a19390ac31 animated-octo-spoon 0.1.0 ships a 2.6MB Linux ELF binary named 'forge' a Rust-compiled CUDA GPU miner plus a launcher script start.sh. The package's...
MAL-2026-10918 Malicious code in automatic-octo-invention (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dfb4e3eedab24e355b6d24db6096e6752563e220d28e83ad2cf213fe49fd89 The package ships an 8.6 MB stripped ELF binary at automaticoctoinvention/claw sha256 f6fe45f8fe9081987505af31f0249021a65b558af514f2e4e37340fb3182805...
linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16216 via django-jet (1.0.8)
django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16216 Source advisory: SNYK:PYTHON-DJANGOJET-18017927...
linhub (0.1.1), octo-drf (>=3.0.0, <=4.4.1) potentially affected by CVE-2026-16215 via django-jet (1.0.8)
django-jet PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django-jet and may be impacted: - linhub 0.1.1 - octo-drf =3.0.0, =4.4.1 Source cves: CVE-2026-16215 Source advisory: SNYK:PYTHON-DJANGOJET-18017926...
GHSA-W8RR-5GCM-PP58 vulnerabilities
Vulnerabilities for packages: knative-eventing, aactl, dapr, kubescape-operator, cerbos-fips, falcosidekick-fips, argo-workflows-fips, knative-net-istio-fips, containerd-fips, kubo, spicedb-fips, elastic-agent-fips, grafana-rollout-operator, flux, kubo-fips, milvus, prometheus,...
CVE-2026-39882 vulnerabilities
Vulnerabilities for packages: knative-eventing, aactl, dapr, kubescape-operator, cerbos-fips, falcosidekick-fips, argo-workflows-fips, knative-net-istio-fips, containerd-fips, kubo, spicedb-fips, elastic-agent-fips, grafana-rollout-operator, flux, kubo-fips, milvus, prometheus,...
MAL-2025-42673 Malicious code in @lbnqduy180500/fuzzy-octo-meme (npm)
The package @lbnqduy180500/fuzzy-octo-meme was found to contain malicious code...
MAL-2025-42686 Malicious code in @lbnqduy2180500/scaling-octo-winner (npm)
The package @lbnqduy2180500/scaling-octo-winner was found to contain malicious code...
MAL-2025-42678 Malicious code in @lbnqduy180500/musical-octo-funicular (npm)
The package @lbnqduy180500/musical-octo-funicular was found to contain malicious code...
MAL-2025-42671 Malicious code in @lbnqduy180500/fictional-octo-garbanzo (npm)
The package @lbnqduy180500/fictional-octo-garbanzo was found to contain malicious code...
MAL-2025-42683 Malicious code in @lbnqduy180500/vigilant-octo-spoon (npm)
The package @lbnqduy180500/vigilant-octo-spoon was found to contain malicious code...
Malicious code in @lbnqduy180500/fuzzy-octo-meme (npm)
The package @lbnqduy180500/fuzzy-octo-meme was found to contain malicious code...
Malicious code in @lbnqduy2180500/scaling-octo-winner (npm)
The package @lbnqduy2180500/scaling-octo-winner was found to contain malicious code...