io.debezium:debezium-platform-conductor (>=3.5.0.CR1 <=3.6.0.Beta1), io.jenkins.plugins:jobcacher-oras-storage (>=8.vc4686b_899f53 <=144.vb_727c9b_7d229) +9 more potentially affected by unknown CVE via land.oras:oras-java-sdk (>=0.2.0 <=0.6.1)

land.oras:oras-java-sdk MAVEN version =0.2.0, =3.5.0.CR1, =8.vc4686b899f53, =0.2.0-4.vc50576b371f6, =7.v5b3e89ff2fca, =8.v5d229eba22c5, =5.v2bc0b458b8b2, =0.0.1, =0.0.1, =0.2.0, =0.2.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XM96-GFJX-JCRC...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: omnibump, victoriametrics, dkron, supercronic, flux-image-reflector-controller, grafana-rollout-operator, metacontroller, flux-notification-controller, smokescreen, grafana-operator, nodetaint, polaris, kubewatch, volume-modifier-for-k8s, aws-network-policy-agent,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, nri-redis, git-sync, rabbitmq-default-user-credential-updater, opentelemetry-collector, newrelic-infrastructure-agent, yace, kubernetes-dashboard-metrics-scraper, kubernetes, http-echo, crossplane-provider-azure-authorization, cilium-certgen, sftpgo,...

Malicious code in @mipta1/oras (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e55b7cf41df2b60c003da22e479a06fecaeeebd38526d0d3f24ea8521fafb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2022-0997

Malicious code in bioql PyPI...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: gitness, nri-redis, petname, php-fpmexporter, speedtest-go, newrelic-infrastructure-agent, grype, kubernetes-dashboard-metrics-scraper, up, mockery, docker-credential-ecr-login, nri-memcached, amass, http-echo, nerdctl, helm-operator, ferretdb, nri-nagios, vault-k8s,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: gitness, nri-redis, petname, php-fpmexporter, speedtest-go, newrelic-infrastructure-agent, grype, kubernetes-dashboard-metrics-scraper, up, mockery, docker-credential-ecr-login, nri-memcached, amass, http-echo, nerdctl, helm-operator, ferretdb, nri-nagios, vault-k8s,...

Software Bill of Materials (SBOM) for your Spin Apps

Learn how to generate, scan, and distribute Software Bill of Materials SBOM for Spin applications using trivy and oras...

OPENSUSE-SU-2024:14554-1 oras-1.2.1-1.1 on GA media

These are all security issues fixed in the oras-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora: Security Advisory for golang-oras-1 (FEDORA-2023-c9b2182a4e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-oras-2 (FEDORA-2023-c9b2182a4e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-oras (FEDORA-2023-c9b2182a4e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: golang-oras-2-2.0.0~rc.4-1.fc37

ORAS Go library...

[SECURITY] Fedora 37 Update: golang-oras-1-1.2.1-1.fc37

ORAS Go library...

[SECURITY] Fedora 37 Update: golang-oras-0.15.1-1.20221105git690716b.fc37

Work with OCI registries, but for secure supply chain - managing content like artifacts, images, SBOM...

[SECURITY] Fedora 36 Update: golang-oras-2-2.0.0~rc.4-1.fc36

ORAS Go library...

[SECURITY] Fedora 36 Update: golang-oras-1-1.2.1-1.fc36

ORAS Go library...

[SECURITY] Fedora 36 Update: golang-oras-0.15.1-1.20221105git690716b.fc36

Work with OCI registries, but for secure supply chain - managing content like artifacts, images, SBOM...

[SECURITY] Fedora 38 Update: golang-oras-2-2.0.0~rc.4-1.fc38

ORAS Go library...

[SECURITY] Fedora 38 Update: golang-oras-1-1.2.1-1.fc38

ORAS Go library...