Lucene search
+L

61671 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/21 8:17 a.m.•21 views

Malicious code in oh-langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b229927c5bc228764ab11651b10bd06c6ff61edffa820a632c343aeec13037 The package configures Langfuse tracing for Claude Code, Codex, and OpenCode. When the operator runs the bundled CLI without explicitly overriding...

5.5AI score
SaveExploits0References18
osv-cleanstart
osv-cleanstart
•added 2026/05/21 8:13 a.m.•46 views

CLEANSTART-2026-TL66481 Security fixes for CVE-2024-24786, CVE-2024-35255, CVE-2025-22868, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-44903, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 0.69.1-r0, 0.69.1-r1, 0.87.1-r0, 0.89.0-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.6AI score0.02326EPSS
SaveExploits5References75
OSV
OSV
•added 2026/05/21 8:12 a.m.•30 views

CLEANSTART-2026-MV81821 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-44903, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-mh2q-q3fh-2475, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 0.87.1-r0, 0.87.1-r1, 0.87.1-r2, 0.87.1-r3

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.6AI score0.02326EPSS
SaveExploits6References66
osv-cleanstart
osv-cleanstart
•added 2026/05/21 8:11 a.m.•306 views

CLEANSTART-2026-LG79681 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-mh2q-q3fh-2475 applied in versions: 0.87.1-r0, 0.89.0-r0, 0.89.0-r1

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02326EPSS
SaveExploits3References58
OSV
OSV
•added 2026/05/21 8:11 a.m.•50 views

CLEANSTART-2026-OD56729 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-mh2q-q3fh-2475 applied in versions: 0.87.1-r0, 0.88.1-r0, 0.89.0-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02326EPSS
SaveExploits3References60
OSV
OSV
•added 2026/05/21 8:10 a.m.•31 views

CLEANSTART-2026-CH40794 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 0.87.1-r0, 0.89.0-r0, 0.90.1-r0

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

10CVSS6.7AI score0.02326EPSS
SaveExploits2References41
osv-cleanstart
osv-cleanstart
•added 2026/05/21 8:09 a.m.•19 views

CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1

Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

9.8CVSS6.7AI score0.01625EPSS
SaveExploits3References51
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/21 12:00 a.m.•4 views

CVE-2026-45760: Externally Controlled Reference to a Resource in Another Sphere

Externally Controlled Reference to a Resource in Another Sphere, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a namespace of their choice, including the...

8.1CVSS8AI score0.00386EPSS
SaveExploits0References3
Wolfi
Wolfi
•added 2026/05/20 7:48 p.m.•27 views

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, external-secrets-operator, kubescape, gitsign, act, argo-cd,...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/05/20 7:48 p.m.•27 views

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, external-secrets-operator, kubescape, gitsign, act, argo-cd,...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/05/20 7:48 p.m.•31 views

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, external-secrets-operator, kubescape, gitsign, act, argo-cd,...

5.4CVSS5.7AI score0.0033EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/05/20 7:48 p.m.•29 views

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, kaniko, bom, kargo, gptscript, pulumi-language-dotnet, gitlab-runner, rancher-fleet, syft, pulumi-language-java, flux-image-automation-controller, cerbos, argo-events, zarf, external-secrets-operator, kubescape, gitsign, act, argo-cd,...

9.6CVSS8.3AI score0.00427EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/05/20 7:17 p.m.•30 views

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: trufflehog-fips, jfrog-cli, nemo, argo-events, pulumi-language-java, pulumi-language-yaml, grype, steampipe, cerbos, cg, redpanda-console, upwind-agent, kubescape, syft, pulumi, pulumi-language-dotnet, nuclei, k9s-fips, gitea-fips, xeol-fips, src-fingerprint,...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/05/20 7:17 p.m.•21 views

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, jfrog-cli, nemo, argo-events, pulumi-language-java, pulumi-language-yaml, grype, steampipe, cerbos, cg, redpanda-console, upwind-agent, kubescape, syft, pulumi, pulumi-language-dotnet, nuclei, k9s-fips, gitea-fips, xeol-fips, src-fingerprint,...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/05/20 7:17 p.m.•31 views

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, jfrog-cli, nemo, argo-events, pulumi-language-java, pulumi-language-yaml, grype, steampipe, cerbos, cg, redpanda-console, upwind-agent, kubescape, syft, pulumi, pulumi-language-dotnet, nuclei, k9s-fips, gitea-fips, xeol-fips, src-fingerprint,...

5.4CVSS5.7AI score0.0033EPSS
SaveExploits0
osv-go
osv-go
•added 2026/05/20 7:07 p.m.•30 views

GO-2026-4996 Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator

Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator...

4.3CVSS6.5AI score0.00369EPSS
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/20 5:29 p.m.•27 views

Malicious code in vlifegram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8771013473b84f29159a80ec15ce3e9897bc69908ddfa2438845811dd276d87c VLifeGram is published under its own name on PyPI but installs into the pyrogram/ namespace and ships a Pyrogram fork at version 2.1.2.4. It adds an...

6.2AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/05/20 4:32 p.m.•31 views

EUVD-2026-31140

In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through srchFilter configurations on custom roles.The app contains an authorize.conf configuration file with a srchFilter entry that...

6.5CVSS5.8AI score0.0032EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/05/20 11:23 a.m.•23 views

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.12 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.12 and Red Hat build of Keycloak 26.4.12 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

8.1CVSS7.3AI score0.011EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/05/20 11:23 a.m.•29 views

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.16 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.16 and Red Hat build of Keycloak 26.2.16 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

8.1CVSS7.3AI score0.011EPSS
SaveExploits0References1
Rows per page
Query Builder